> Markdown version of [/jobs/ext/227776-manager-it-risk-and-controls](https://www.wearedevelopers.com/jobs/ext/227776-manager-it-risk-and-controls). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Manager, IT Risk and Controls - **Company:** Amer Sports - **Location:** New York, NY, United States - **Experience:** Expert - **Salary:** $140,000.0 - $160,000.0 - **Contract:** Permanent contract - **Skills:** Microsoft Excel, Artificial Intelligence, Amazon Web Services, Data Analysis, Microsoft Azure, Cloud Computing, Information Systems, Data Integrity, Identity and Access Management, Information Technology Audit, SAP ERP, Power BI, OneStream, SAP (Applications), SQL Databases, Data Streaming, IT General Controls (ITGC), RSA Archer Platform, SailPoint, Workday - **Published:** May 15, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=4cc7d33591df0d91 ## About the Role Do you have a valid CPA license?, Do you have experience in SOX?, Do you have a Bachelor's degree?, * 5+ years in IT risk, IT audit, SOX IT controls, or technology risk management - ideally in a global or shared services environment. * Deep knowledge of ITGC frameworks and their application in SOX compliance. * Hands-on experience with ERP systems (SAP ECC or S/4 strongly preferred), consolidation systems (OneStream preferred) including control design, user access, and configuration. * Familiarity with control automation tools (BlackLine, RPA, GRC platforms) and data analytics tools (SQL, Power BI, Excel). * Familiarity with identity governance and administration (IGA) platforms (SailPoint, Saviynt, or equivalent) is a plus, particularly in the context of SAP access provisioning and segregation of duties enforcement. * Strong communicator who can translate technical risk into business language for executive and audit audiences. * Bachelor's or Master's in Information Systems, Accounting, Finance, or a related field. * CISA strongly preferred; CISSP or CPA a plus. Active certification or demonstrated progress toward CISA is a differentiating factor for this role. * This role is expected to travel roughly 10% throughout the year. ## Description As our IT Risk and Controls Manager, you'll sit at the intersection of technology, finance, and compliance, helping shape how we manage IT control risks across a global enterprise. Reporting to the Director of Internal Controls, you'll be a key voice in our controls team, working alongside IT, Internal Audit, and business stakeholders to help create a resilient, audit-ready control environment as we continue to scale and modernize our systems. This is a high-visibility role with real influence over how we design and govern controls. Specific responsibilities include: IT General Controls & SOX Compliance * Own the development and ongoing maturity of ITGCs (access management, change management, system operations), ensuring consistent execution aligned with SOX requirements. * Facilitate SOX IT walkthroughs and audit readiness, including system narratives, data flow diagrams, and control matrices. * Serve as the primary liaison between IT, Internal/External Audit, and corporate teams on IT control matters. Application Controls & Data Integrity * Lead governance of system-based controls and reconciliation processes across ERP platforms (SAP ECC/S4) and financial tools (OneStream, Workday, BlackLine). * Oversee application control design and effectiveness, ensuring proper configuration and compliance with control standards. Risk Assessment & Monitoring * Conduct ongoing IT risk and control assessments identifying gaps across systems, interfaces, data flows, cloud infrastructure (AWS/Azure), and emerging risks from AI-enabled tools and automated processes, and own mitigation plans through to resolution. * Manage IT risk dashboards and reporting, including KPIs on control effectiveness, access deficiencies, and audit findings. * Assess and monitor IT risk across third-party service providers and co-sourced relationships, ensuring vendor controls are commensurate with financial reporting reliance. Cross-Functional Leadership & Transformation * Lead IT controls work through cross-functional influence - coordinating co-sourced Internal Audit resources, external audit engagement teams, and GBS Risk & Controls colleagues across regions without direct reporting lines. Build capability and risk awareness across the broader IT and finance organization. * Embed controls by design into ERP implementations, system upgrades, and digital transformation initiatives. * Promote the transition from manual, detective controls to preventive and automated controls where feasible. ## Related Videos - [Destigmatizing the Workplace: Building Real Inclusion](https://www.wearedevelopers.com/videos/1492-destigmatizing-the-workplace-building-real-inclusion) - [Headless by Design: Building Enterprise Systems That Agents Can Actually Use](https://www.wearedevelopers.com/videos/100092-headless-by-design-building-enterprise-systems-that-agents-can-actually-use) - [REST, GraphQL, gRPC, and more: A comparison of modern API styles](https://www.wearedevelopers.com/videos/100247-rest-graphql-grpc-and-more-a-comparison-of-modern-api-styles) - [Navigating the Corporate Jungle: Life as a Developer in a large Company](https://www.wearedevelopers.com/videos/621-navigating-the-corporate-jungle-life-as-a-developer-in-a-large-company) - [The Future of Employee Wellbeing: Benefits, Trust & Performance](https://www.wearedevelopers.com/videos/1808-the-future-of-employee-wellbeing-benefits-trust-performance) - [Blueprints for Success: Steering a Global Data & AI Architecture](https://www.wearedevelopers.com/videos/1577-blueprints-for-success-steering-a-global-data-ai-architecture) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Best Companies to Work For in Berlin: Top 14 Companies in 2023 ](https://www.wearedevelopers.com/magazine/188-best-companies-to-work-for-in-berlin-top-14-companies-in-2023) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Software Developer Salary in Switzerland [2023]](https://www.wearedevelopers.com/magazine/215-software-developer-salary-in-switzerland-2023)