IT SOx Manager

We are seeking an experienced IT SOx & Control Assurance Lead to take ownership of the enterprise IT controls framework within a regulated financial services environment. This is a senior, high-impact role responsible for setting the strategic direction for General Computer Controls (GCCs) and strengthening the wider IT control environment. You will partner closely with Technology, Risk, Compliance, and Finance stakeholders to ensure a robust, sustainable, and audit-ready control framework. You will play a key role in driving accountability, influencing remediation priorities, and continuously improving control maturity across the organisation., SOx Controls and Governance

• Lead the IT SOx controls framework, with ownership of GCCs and oversight of technology control environments
• Define and maintain the Risk and Control Matrix (RACM), ensuring alignment to systems, processes, and regulatory requirements
• Continuously enhance the IT control framework to support sustainable SOx compliance

Stakeholder Management

• Drive senior engagement and accountability across technology teams
• Partner with Technology, Risk, Compliance, and business stakeholders to strengthen control effectiveness
• Promote awareness and understanding of SOx controls and responsibilities across the organisation

Audit and Assurance

• Act as the primary lead for internal and external audit engagement on IT SOx matters
• Ensure audit readiness, including documentation, walkthroughs, and evidence management
• Manage audit responses and ensure timely resolution of findings

Issue Management and Remediation

• Oversee governance and resolution of IT SOx control findings
• Develop and drive pragmatic and sustainable remediation plans
• Ensure issues are resolved with appropriate evidence and audit validation

Segregation of Duties (SoD)

• Provide oversight of SoD controls across systems and applications
• Ensure effective governance of access, roles, and conflict management
• Drive timely resolution of access-related risks and control gaps

Do you have experience in NIST standards?, * Strong experience in SOx compliance, with a focus on General Computer Controls (GCCs)

• Broad technical understanding of IT environments, including identity and access management, change management, cloud platforms, and infrastructure
• Proven experience designing, implementing, and improving IT control frameworks
• Ability to influence and challenge senior stakeholders to drive control improvements
• Strong communication skills, with the ability to translate complex technical risks into clear business outcomes

Desirable

• Background in IT audit (internal or external)
• Professional certifications such as CISA (preferred), or CISM, CRISC, CISSP
• Knowledge of control frameworks such as COBIT, ISO 27001, and NIST
• Experience with GRC tools and evidence management platforms

At Kensington Mortgages, we believe our people are at the heart of our success. We are committed to creating a supportive, flexible and inclusive environment that enables both personal and professional growth.