IT Controls and NFR Manager

IT Controls (ITGC/ITAC) & NFR Manager (SAP S/4HANA programme)
A global organisation is looking for an experienced IT Controls & Non-Functional Requirements (NFR) Manager to support a major SAP S/4HANA transformation. You'll own the controls readiness workstream and drive NFR delivery (particularly security and resilience) across design, build, testing, cutover and go-live.

Key details

• Engagement: Contract
• Location: London, UK (on-site requirement)
• Rate: Up to £850/day
• Focus: IT General Controls (ITGC), IT Application Controls (ITAC), SOx/audit readiness, NFRs for SAP programmes

• Lead IT controls management across the programme to ensure audit-ready / SOx-aligned outcomes through go-live.
• Partner with control owners, programme leadership, SI partners, SAP teams, security, internal audit and external auditors.
• Own the inventory of controls, risks, deficiencies, remediation actions and evidence.
• Drive the definition, design, testing and release of NFRs, including:
  • Identity & access management
  • Segregation of duties / privileged access
  • Vulnerability management
  • Resilience & disaster recovery
• Coordinate controls and readiness activities for data migration, reconciliation, validation, cutover and go-live.
• Produce clear status reporting and escalate material risks via governance forums.

• Strong background in IT risk / IT controls / assurance (typically 5+ years).
• Hands-on experience with SAP implementations/rollouts (ideally S/4HANA).
• Solid knowledge of ITGCs, ITACs, internal control frameworks, SOx-style environments.
• Experience assessing outsourced IT operations and reviewing SOC reports / third-party assurance.
• Confident translating technical control issues into plain-English business risk for senior stakeholders.

• Experience using data analytics to spot anomalies and control weaknesses.
• Comfortable working directly with external auditors.