Senior Director, IT Governance and Security Controls

Coca-Cola; United States; On-site; USD 180,000 - 230,000; Full time

Job summary

The Coca-Cola Company seeks a Senior Director I, IT Governance and Security Controls to lead the organization’s governance, SOX compliance, and risk management programs. You will partner with IT, Finance, Corporate Audit, and external auditors to ensure effective controls and proactive risk mitigation, while shaping executive communications and strategic governance reporting.

This role emphasizes driving automation, analytics, and AI-enabled governance capabilities across the enterprise to

Qualifications

• Experience leading IT governance and compliance programs.
• Strong knowledge of IT General Controls (ITGCs) and control frameworks.
• Ability to develop executive-level governance reporting and risk metrics.

Responsibilities

• Lead IT governance and compliance programs across global environments.
• Oversee SOX ITGCs, control design, monitoring and remediation.
• Drive risk management initiatives and automation initiatives.
• Develop executive-level governance reporting for leadership and boards.
• Partner with IT, Finance, Audit and business leaders to align priorities.

Skills

IT governance

SOX compliance

risk management

KPIs & reporting

stakeholder engagement

Education

Bachelor's degree in Information Technology / Information Systems

Job description

Job Description Summary:

Overview

The Senior Director I, IT Governance and Security Controls reports to the Leader of IT Governance and Compliance team and is responsible for leading the execution of the organization's IT governance, SOX compliance, and risk management programs. This role serves as a key leader within the second line of defense, driving day-to-day operations, strategic initiatives, and continuous improvement efforts that strengthen the overall IT controls environment and governance framework.

The Senior Director partners closely with IT, Finance, Corporate Audit, external auditors, and business stakeholders to ensure effective management of SOX IT General Controls (ITGCs), support regulatory compliance requirements, and proactively identify and mitigate technology-related risks. This leader also plays a critical role in developing executive-level communications, governance reporting, and strategic materials for senior leadership, while helping translate organizational priorities into actionable programs and measurable outcomes.

Additionally, this role supports the evolution of governance capabilities through the evaluation and adoption of automation, analytics, and artificial intelligence solutions that enhance risk monitoring, compliance oversight, and decision-making across the enterprise.

Key Responsibilities

Governance & Program Leadership

Partner with the Leader of IT Governance and Compliance team to execute the global IT Governance and Compliance strategy, priorities, and operating model.

Lead day-to-day operation of the IT Governance and Compliance function, ensuring objectives, milestones, and compliance commitments are achieved.

Drive governance programs that strengthen control maturity, risk management, and operational effectiveness across global IT environments.

Establish and monitor key performance indicators (KPIs), compliance metrics, and program health measures to support informed leadership decision making.

Support the development and implementation of governance policies, standards, procedures, and control frameworks.

IT Controls & Compliance Oversight

Oversee the execution and quality of SOX IT General Controls (ITGCs) across globally in-scope systems.

Provide direction on control design, implementation, monitoring, and optimization activities.

Drive consistency in quality assurance reviews, deficiency evaluations, and remediation execution.

Support governance oversight for key risk areas, including User Access Reviews (UARs), Segregation of Duties (SoD), privileged access management, and automated controls.

Ensure compliance activities align with regulatory requirements, PCAOB expectations, and company policies.

Risk Management & Strategic Initiatives

Lead enterprise-wide IT compliance and risk initiatives designed to reduce risk and improve governance effectiveness.

Partner with technology and business leaders to identify emerging risks and develop mitigation strategies.

Lead the evaluation and adoption of automation, analytics, continuous controls monitoring, and artificial intelligence capabilities to enhance governance oversight, risk identification, compliance monitoring, and operational efficiency.

Partner with technology and business stakeholders to define and implement governance tooling strategies, including access governance, controls automation, risk management, and compliance technologies.

Support implementation of new technologies, acquisitions, and transformation initiatives to ensure governance and compliance requirements are incorporated early in the project lifecycle.

Drive continuous improvement efforts focused on efficiency, scalability, and sustainability of compliance processes.

Executive Reporting & Stakeholder Engagement

Lead the development and coordination of executive Steering Committee, Audit Committee, and Board-related governance reporting, ensuring clear communication of compliance risks, control environment health, and remediation activities.

Serve as a senior liaison with Internal Audit, Corporate Audit, external auditors, Finance leadership, and IT executives.

Present program updates, risk assessments, and strategic recommendations to senior leadership and governance forums.

Facilitate alignment across stakeholder groups to drive timely resolution of compliance and risk-related matters.

People Leadership & Organizational Development

Provide leadership and oversight across multiple governance workstreams and management layers, ensuring effective prioritization, resource allocation, and execution of strategic initiatives.

Foster an environment of accountability, collaboration, innovation, and continuous improvement.

Support workforce planning, talent development, succession planning, and organizational growth initiatives.

Promote knowledge sharing and development of governance, compliance, and risk management capabilities across the team.

Qualifications

Bachelor's degree in Information Technology, Information Syste