This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
We are partnered with a leading global beverage solutions provider who are looking for an IT GRC Manager to join their team. The business works with major international retailers and brands, delivering products that reach consumers worldwide. With a strong focus on innovation, governance, and operational excellence, the company continues to evolve in a fast-paced, high-growth environment.
Job Responsibility
Lead comprehensive IT risk assessments across applications, infrastructure, and data environments
Develop and maintain risk registers, identifying key threats, impacts, and mitigation strategies
Own and enhance SOX compliance processes, including RCM maintenance and control testing
Evaluate application controls, interfaces, data transfers, and report accuracy (IPE validation)
Monitor and manage third-party risk, developing and implementing risk frameworks
Oversee IT disaster recovery planning, testing, and audit readiness
Assess cybersecurity posture and evaluate the impact of incidents on controls and reporting
Ensure compliance with regulatory frameworks such as SOX and NIST
Partner with IT and business stakeholders to remediate risks and strengthen controls
Support internal and external audits and deliver GRC training initiatives
Requirements
5+ years of relevant experience, including IT SOX within a US-listed environment
Strong experience in IT Risk, IT audit, or risk management within a large or global organisation (manufacturing experience is essential)
Deep knowledge of SOX compliance, IT general controls (ITGCs), and control frameworks
Experience with ERP systems, ideally SAP, and understanding of system control environments
Professional certifications such as CPA, CIA, CISA, or CRISC
Strong stakeholder management and communication skills
Analytical mindset with the ability to assess complex risks and controls
Highly organised with strong project and program management capabilities