Risk and Controls Program Manager

Spotify AB; United Kingdom; Remote; GBP 60,000 - 100,000; Full time

Job summary

An established industry player is on the lookout for a Technology Risk and Controls Program Manager to spearhead vital risk and control initiatives within their Financial Engineering team. This role is essential for ensuring secure and compliant operations as the company expands. You'll partner with engineering and audit teams to drive global internal controls and compliance efforts, while also providing thought leadership in risk management. Flexibility to work from anywhere in the UK makes this opportunity even more appealing. If you're passionate about risk and compliance in a dynamic environment, this role is for you!

Qualifications

• 5+ years of experience in public accounting or IT compliance.
• CPA/CISA certification is strongly preferred.

Responsibilities

• Lead risk and control initiatives within the Financial Engineering team.
• Collaborate with teams to maintain an effective IT control environment.

Skills

Risk Management

Internal Controls

Compliance

Audit

Agile Methodologies

Project Management

Education

Bachelor’s degree in Accounting, Finance, or Management Information Systems

Tools

NetSuite

Job description

Spotify is seeking a Technology Risk and Controls Program Manager to lead critical risk and control initiatives within our Financial Engineering team. This role is crucial for ensuring the team's operations are secure, compliant, and scalable as Spotify continues to grow and diversify its business.

Location

• United Kingdom (Home Mix)

Job type

Permanent

What You'll Do

• Partner with engineering, business, and internal audit teams to drive efforts related to Spotify’s global Internal Controls over Financial Reporting (ICFR) and Sarbanes-Oxley (SOX) requirements.
• Liaise and translate risk and controls between the business process and IT General Controls (ITGC) environments across a complex systems landscape that follows an agile development approach.
• Collaborate with process and control owners to maintain an effective Engineering (IT) control environment, including recommendations for the design, implementation, and remediation of ITGCs and IT application controls.
• Provide training and support for system control owners and their teams to ensure effective operation of ITGCs and associated business process controls.
• Enable the efficient execution of our SOX compliance program and schedule by serving as the primary liaison between external audit and the R&D Engineering teams you support.
• Provide thought leadership and risk and compliance support as our businesses, processes and technology evolve.
• Support major business and technology projects by providing risk analysis and control impact assessments while assisting in the implementation of any associated control or process changes.
• Monitor industry and regulatory (SEC, PCAOB) developments and develop recommendations for policy, process, technology, and internal control improvements.

Who You Are

• Bachelor’s degree in Accounting, Finance, Management Information Systems, or equivalent.
• 5+ years of experience in public accounting, risk and controls/IT compliance, Internal Audit, or an equivalent role.
• CPA/CISA or other relevant certification is strongly preferred.
• Big 4 experience is preferred.
• Knowledge of and experience working with software engineering teams and standard engineering methodologies, including Agile and CI/CD.
• Ability to work independently to plan, complete, and deliver on projects in an assigned organizational area.
• Experience with control environments related to financial SaaS systems, NetSuite or other similar cloud ERP is a plus.
• Experience working with multinational organizations and teams distributed across multiple time zones is a plus.

Where You'll Be

• We offer you the flexibility to work where you work best! For this role, you can be within the United Kingdom region as long as we have a work location.
• This team operates within the Greenwich Mean Time (GMT) for collaboration.