IT Controls Test Manager

Why this job matters

BT works in a regulated environment and sells products that require assurance. This role is to define and implement an IT Controls framework that is appropriate for Digital, that meets current needs and is adaptable for future areas of growth.

Digital has risk obligations that cover Data GDPR, Financial statement and Cyber risk. The definition, governance and lifecycle management of a framework is a Risk and assurance requirement.

A breach against the above risks will result in legal action, fines, reputational and shareholder damage to BT.

Full time, 3 days a week together in either one of our Digital Hub locations including Bristol, Birmingham, Manchester and London (flexible 2 days a week wherever).

What you'll be doing

1. Supporting the Senior managers in Risk and compliance team. Working as part of a small team of ICOFR controls and assurance specialists
2. Developing the annual controls test plan for a team of IT Control specialists
3. Delivering timely and accurate reporting on controls test status
4. Delivering testing against specific controls
5. Supporting the control matrix and remediation plans of any deficient controls
6. Supporting the onboarding of new applications into the controls environment
7. Performing control design & implementation, test preparation and operations
8. Managing stakeholders across 3 Lines of Defence
9. Helping to establish horizon scanning for new emerging risk
10. Creating and maintaining a health dashboard for applications and ICOFR Controls. This to inform programme decision making
11. Stakeholders will range from operational level application support teams to senior managers responsible for ICOFR controls (MDs, Platform Directors and Senior Management Team Members)
12. Ensuring that requirements, timelines, quality of information requirements are all understood and delivered by responsible directors

You'll have the following skills and experience

Essential requirements:

1. Ability to work with business sponsors and IT technical delivery teams to drive complex IT controls
2. Proven track record of getting results from matrixed teams
3. Ability to manage stakeholders in a complex environment of business and audit risk demand
4. Good knowledge of risk management and BT Enterprise Risk Management practices would be an advantage
5. Experience of ICOFR controls, compliance controls and frameworks to ensure assurance through the three lines of defence model is an advantage
6. A good competent grounding in IT tools, Excel, and Access
7. The ability to develop, present and update a dashboard of IT health status, both applications and IT controls

Desirable requirements:

1. CISA, CISSP or similar
2. Strong analytical and problem solving skills
3. Project management skills
4. Experience in audit methodologies (CISA would be beneficial)
5. Knowledge of IT frameworks and methodologies COSO, ITIL, COBIT, etc
6. Experience in a S-OX (or similar) controls environment
7. Knowledge and experience of SAP

Benefits

1. Annual On target bonus 10% (personal and company multipliers)
2. BT Pension scheme; minimum 5% employee contribution, BT contribution 10%
3. Life Assurance
4. Direct share scheme
5. Exclusive colleague discounts on our latest and greatest BT broadband packages
6. 50% off EE mobile pay monthly or SIM only plans and 50% discount for friends and family on EE SIM only plans
7. My Discounts gives colleagues access to unbeatable savings on everyday purchases at hundreds of retailers
8. Discounted EE TV including TNT Sport and the NOW Entertainment membership
9. Great support for working parents including pay whilst on maternity, adoptive, and paternity leave
10. Option to join the Healthcare Cash Plan or other benefits such as dental insurance, gym memberships etc.
11. 25 days annual leave (not including bank holidays), increasing with service
12. Volunteering days so you can give back to your local community
13. Brand new electric vehicle salary sacrifice arrangement, known as 'My EV'