IS Applications Lead

• Maintain (cross-discipline) IS applications processes, procedures and work instructions (and drive compliance)
• Determine / maintain fit-for-purpose scalable and resilient integrated applications architecture, ensuring reliability, security, integrity and performance of the estate
• Act as applications focal point for (cross-discipline) IS / IT / Cyber / Deloitte audits and external reviews
• Manage all third party application vendors, relationships and commercial agreements
• Classify, assess and assure third party / cloud / SaaS application services
• Execute application-related control assurance attestations
• Undertake contract renewals / tenders in collaboration with Head of IS and the Supply Chain function
• Maintain secure password management (rotation, vault storage etc.)
• Manage Source-to-Pay processes for IS applications (in collaboration with team, business owners, Supply Chain and Finance)
• Project Manage / Deliver application projects (upgrades, changes, replacements, implementations etc.), drawing on outsourced support
• Co-ordinate Test / UAT cycles
• Collaborate with the Head of IS and the IT Lead to evolve cyber control framework of Manage, Protect, Detect and Respond capability / controls, with ongoing maturity assessments
• Conduct security due diligence assessments on any new / changed IS services impacting the business
• Conduct Cyber Incident Response testing in collaboration with team
• Support cyber incident response / investigations
• Oversee service provisioning and hosting of internal LoB apps and associated integrations
• Oversee service provisioning and hosting of external / SaaS LoB apps and associated integrations
• Manage licensing, consumption and renewals for all applications
• Manage apps lifecycle (scope, source, design, build, test, commission, host, run, maintain, upgrade, retire, archive)
• Handle apps change / upgrade / release management
• Maintain apps (including SAP) build / support documentation (including Service Catalogue), drawing on outsourced providers
• Provide Master Data Management
• Handle major incident response (Apps, including SAP)
• Manage outsourced Apps support contract performance / resources, directing and supervising as required
• Act as the “glue” to connect external vendors and handle escalations related to integration / interfaces
• Any other associated duties as reasonably required

SAP-Specific:

• Oversee SAP landscape and associated integration - architecture, performance & security
• Oversee SAP hosting and core technical support and maintenance (external SAP RISE and internal SAP BW / PO on Azure) and associated interfaces
• Maintain and ensure operation of SAP-specific controls aligning to shareholder requirements, drawing on outsourced support
• Co-ordinate scoping / shaping / design of change activity between business and external service provider
• Handle SAP change / upgrade / release management, acting as Gate Keeper / Design Authority
• Manage outsourced SAP support contract performance / resources, directing and supervising as required
• Collaborate with Head of IS and Centrica over shared SAP journey (specific contract renewal needed in 2027)

To be successful in this role, we are looking for:

• Strong overall understanding of IS applications management in a technical multi-site organisation
• Appreciation of infrastructure, networks and end user computing
• Good understanding of MS365, Azure and PowerApps / PowerBI
• Good understanding of core SAP principles around change and release management
• Ability to develop and maintain procedural, technical and architectural documentation and maintain a Service Catalogue
• Knowledge of software licensing models and consumption analysis
• Commercial skills to manage scope, specification and cost relating to applications
• Ability to interface with audit teams, acting as the bridge between outsourced delivery teams and auditors
• Deep and disciplined understanding of IT General Controls, specifically including those relating to SAP
• Solid understanding of key processes including incident, problem and change management as well as business analysis and PMO processes for project delivery.
• Effective contract management skills, with the ability to manage outsourced service providers and to connect vendors and navigate interfaces
• Ability to co-ordinate (and in some cases execute) application testing
• Strong appreciation for cyber security and the Cyber Assessment Framework, covering Managing Security Risk, Protecting against Cyber Attacks, Detecting Cyber Security Incidents and Minimising Impact of Security Incidents.
• Ability to handle escalations, lead on significant incident response and manage outsourced resources as required
• Batchelor’s Degree in an IT / business discipline (or equivalent experience)