Security Controls Manager

Digital Waffle; United Kingdom; Remote; GBP 76,500 - 93,500; Full time

Benefits offered by this job

Bonus structure

Remote work flexibility

Job summary

A leading consulting firm is seeking a Senior Risk and Controls Manager to develop and implement robust internal control frameworks, particularly in SAP environments. You will act as a trusted advisor for clients on governance, risk, and compliance strategies, fostering strong client relationships while leading a collaborative team. The ideal candidate has extensive GRC controls experience and relevant professional qualifications. This remote role offers a competitive salary up to £85,000 plus bonus.

Qualifications

• Extensive experience designing and implementing GRC controls.
• Strong background in IT General Controls and IT Application Controls.
• Proven ability to communicate with senior management.

Responsibilities

• Develop and evaluate internal control frameworks focused on SAP.
• Act as a lead advisor on GRC strategy and compliance.
• Support junior consultants and analysts.

Skills

GRC controls design

SAP ERP landscapes

IT General Controls (ITGCs)

IT Application Controls (ITACs)

Financial compliance frameworks

Analytical skills

Communication skills

Organisational skills

Education

CISA, ACA, ACCA or similar

Job description

Senior Risk and Controls Manager - Remote - Up to £85,000 + Bonus

My client is looking for a seasoned Controls professional with deep expertise in Governance, Risk and Compliance (GRC), particularly within SAP-based environments. This role suits someone who understands how effective controls support both regulatory compliance and wider business objectives, and who is confident advising senior stakeholders on risk, controls, and governance matters.

Key Responsibilities

• Develop, implement, and evaluate internal control frameworks, with a strong focus on SAP-enabled systems.
• Act as a lead advisor in client discussions covering GRC strategy, compliance requirements, and optimisation of control environments, including ITGCs, ITACs, and key ICFR controls.
• Provide subject matter expertise on regulatory obligations such as Sarbanes-Oxley (SOX) and UK Corporate Reform (Provision 29), translating requirements into practical, value-driven solutions.
• Lead, coach, and support junior consultants and analysts, fostering a collaborative and high-performing team culture.
• Contribute to business development activities, including opportunity scoping, proposal writing, and participation in client pitches across the sales lifecycle.
• Build and maintain strong, long-term client relationships, positioning yourself as a trusted advisor in controls and compliance.

Core Behaviours

• Focused on the purpose and value behind solutions, not just their technical execution.
• Strong client-first mindset, with a proven ability to align work to client priorities.
• Passionate about evolving risk and controls into a function that enables business growth rather than just compliance.
• Confident in building effective relationships with stakeholders at all levels, both internally and externally, in a hybrid working environment.

Skills & Experience

• Extensive experience designing, implementing, and testing GRC controls, ideally within SAP ERP landscapes.
• Strong background in IT General Controls (ITGCs) and IT Application Controls (ITACs).
• Solid understanding of financial compliance frameworks, including SOX and UK Corporate Reform (Provision 29).
• Knowledge of core finance processes and related ICFR controls.
• Proven ability to lead engagements and communicate clearly with senior management.
• Experience managing and mentoring team members.
• Exposure to the consulting sales cycle, including bid support and opportunity development.
• Excellent analytical, communication, and organisational skills.
• Professional qualifications such as CISA, ACA, ACCA, or similar.
• Background in risk advisory, internal controls, or a top-tier consulting environment.
• Experience with emerging risk and controls capabilities, including automation, data analytics, and AI-driven solutions.