Senior Director, IT Governance and Security Controls

Coca-Cola; Georgia; On-site; USD 202,000 - 229,000; Full time

Job summary

The Coca-Cola Company seeks a Senior Director I, IT Governance and Security Controls to lead global IT governance, SOX ITGCs, and risk management programs. This role partners with IT, Finance, Corporate Audit, and external auditors to strengthen the controls environment and governance framework.

The position drives automation, analytics, and AI-enabled governance capabilities, translating priorities into actionable programs with measurable outcomes for senior leadership.

Qualifications

• Bachelor's degree or higher in IT, accounting, finance, or business.
• 12 years of progressive IT governance, SOX, controls, IT audit, risk management.
• 7+ years of leadership in large global organizations.
• Deep SOX ITGCs, PCAOB requirements, IT risk mgmt, governance frameworks.

Responsibilities

• Lead global IT governance and compliance strategy, operating model, and KPIs.
• Oversee SOX ITGCs across in-scope systems and ensure control design and monitoring.
• Drive enterprise IT compliance initiatives, risk mitigation, and automation adoption (analytics/AI).
• Lead executive reporting to Steering Committee, Audit Committee, and Board.
• Provide leadership across governance workstreams and organizational development.

Skills

AI

Executive Presence

IT Risk Management

ITGC

GRC

PCAOB Auditing Standards

SAP Applications

SOX Compliance Audit

Education

Bachelor's degree in Information Technology, Information Systems, Accounting, Finance, Business, or related field

Tools

SAP environments

Access governance

GRC solutions

Job description

Job Description Summary: Overview The Senior Director I, IT Governance and Security Controls reports to the Leader of IT Governance and Compliance team and is responsible for leading the execution of the organization s IT governance, SOX compliance, and risk management programs. This role serves as a key leader within the second line of defense, driving day-to-day operations, strategic initiatives, and continuous improvement efforts that strengthen the overall IT controls environment and governance framework. The Senior Director partners closely with IT, Finance, Corporate Audit, external auditors, and business stakeholders to ensure effective management of SOX IT General Controls (ITGCs), support regulatory compliance requirements, and proactively identify and mitigate technology-related risks. This leader also plays a critical role in developing executive-level communications, governance reporting, and strategic materials for senior leadership, while helping translate organizational priorities into actionable programs and measurable outcomes. Additionally, this role supports the evolution of governance capabilities through the evaluation and adoption of automation, analytics, and artificial intelligence solutions that enhance risk monitoring, compliance oversight, and decision-making across the enterprise.

Key Responsibilities

Governance Program Leadership

Partner with the Leader of IT Governance and Compliance team to execute the global IT Governance and Compliance strategy, priorities, and operating model. Lead day-to-day operation of the IT Governance and Compliance function, ensuring objectives, milestones, and compliance commitments are achieved. Drive governance programs that strengthen control maturity, risk management, and operational effectiveness across global IT environments. Establish and monitor key performance indicators (KPIs), compliance metrics, and program health measures to support informed leadership decision making. Support the development and implementation of governance policies, standards, procedures, and control frameworks.

IT Controls Compliance Oversight

Oversee the execution and quality of SOX IT General Controls (ITGCs) across globally in-scope systems. Provide direction on control design, implementation, monitoring, and optimization activities. Drive consistency in quality assurance reviews, deficiency evaluations, and remediation execution. Support governance oversight for key risk areas, including User Access Reviews (UARs), Segregation of Duties (SoD), privileged access management, and automated controls. Ensure compliance activities align with regulatory requirements, PCAOB expectations, and company policies.

Risk Management Strategic Initiatives

Lead enterprise-wide IT compliance and risk initiatives designed to reduce risk and improve governance effectiveness. Partner with technology and business leaders to identify emerging risks and develop mitigation strategies. Lead the evaluation and adoption of automation, analytics, continuous controls monitoring, and artificial intelligence capabilities to enhance governance oversight, risk identification, compliance monitoring, and operational efficiency. Partner with technology and business stakeholders to define and implement governance tooling strategies, including access governance, controls automation, risk management, and compliance technologies. Support implementation of new technologies, acquisitions, and transformation initiatives to ensure governance and compliance requirements are incorporated early in the project lifecycle. Drive continuous improvement efforts focused on efficiency, scalability, and sustainability of compliance processes.

Executive Reporting

Lead the development and coordination of executive Steering Committee, Audit Committee, and Board-related governance reporting, ensuring clear communication of compliance risks, control environment health, and remediation activities. Serve as a senior liaison with Internal Audit, Corporate Audit, external auditors, Finance leadership, and IT executives. Present program updates, risk assessments, and strategic recommendations to senior leadership and governance forums. Facilitate alignment across stakeholder groups to drive timely resolution of compliance and risk-related matters.

People Leadership Organizational Development

Provide leadership and oversight across multiple governance workstreams and management layers, ensuring effective prioritization, resource allocation, and execution of strategic initiatives. Foster an environment of accountability, collaboration, innovation, and continuous improvement. Support workforce planning, talent development, succession planning, and organizational growth initiatives. Promote knowledge sharing and development of governance, compliance, and risk management capabilities across the team.

Qualifications

• Bachelor s degree in Information Technology, Information Systems, Accounting, Finance, Business, or related field.
• 12 years of progressive experience in IT governance, SOX compliance, internal controls, IT audit, risk management, or related disciplines.
• 7 years of leadership experience managing teams within large, global organizations.
• Deep understanding of SOX ITGCs, PCAOB requirements, IT risk management, and governance frameworks.
• Experience leading enterprise compliance, risk, audit, or governance programs.
• Strong executive presence with demonstrated experience preparing and presenting materials to senior leadership and governance committees.
• Experience with SAP environments, access governance, and GRC solutions preferred.
• Knowledge of emerging technology risks, automation, data analytics, and AI-enabled governance capabilities.
• Professional certifications such as CISA, CPA, CRISC, CISM, or equivalent.

What We’ll Do For You

• Innovation: We embrace a culture of experimentation and innovation, providing you the opportunity to contribute to new, different, or better ways of doing things.
• Agile Work Environment: We embrace agile with management that believes in removing barriers, so you are empowered to experiment, iterate, and innovate.
• Industry Leaders: Collaborate with leaders in the industry. Our team is composed of professionals who are experts in their fields, providing an environment where you can learn, grow, and make a significant impact.

The Coca-Cola Company will not offer sponsorship for employment status (including, but not limited to, H1-B visa status and other employment-based nonimmigrant visas) for this position. Accordingly, all applicants must be currently authorized to work in the United States on a full-time basis and must not require The Coca-Cola Company's sponsorship to continue to work legally in the United States.

Skills

• Artificial Intelligence (AI)
• Executive Presence
• Information Technology (IT) Risk Management
• Information Technology General Controls (ITGC)
• IT Governance Risk and Compliance (GRC)
• PCAOB Auditing Standards
• SAP Applications
• SOX Compliance Audit

Pay Range

United States: 202,000 - 229,000 USD. Base pay offered may vary depending on geography, job-related knowledge, skills, and experience. A full range of medical, financial, and/or other benefits, dependent on the position, is offered.

Location(s)

United States of America
City/Cities: Atlanta
Travel Required: 00% - 25%
Relocation Provided: No

Job Posting End Date: October 2, 2026

Our Purpose and Growth Culture

We are taking deliberate action to nurture an inclusive culture that is grounded in our company purpose, to refresh the world and make a difference. We act with a growth mindset, take an expansive approach to what's possible and believe in continuous learning to improve our business and ourselves. We focus on four key behaviors - curious, empowered, inclusive and agile - and value how we work as much as what we achieve. We believe that our culture is one of the reasons our company continues to thrive after 130 years. Visit Our Purpose and Vision to learn more about these behaviors and how you can bring them to life in your next role at Coca-Cola.

We are an Equal Opportunity Employer and do not discriminate against any employee or applicant for employment because of race, color, sex, age, national origin, religion, sexual orientation, gender identity and/or expression, status as a veteran, and basis of disability or any other federal, state or local protected class. When we collect your personal information as part of a job application or offer of employment, we do so in accordance with industry standards and best practices and in compliance with applicable privacy laws.