About The Role
Location – Leeds/Dublin/LondonHybridPermanent
We are seeking a highly skilled and expert Head of SOX ITGC and Technology GRC to join the Flutter Functions Cybersecurity team within Flutter Functions Technology Operations department. As an NYSE‑listed company, maintaining good practices and posture relative to our IT General Controls is vital to our continued compliance with SOX and coordinating our cyber control health via our NIST CSF 2.0 framework.
The Head of SOX IT General Controls (ITGC) and Technology Governance, Risk & Compliance (GRC) is responsible for leading and continuously improving Flutter Functions’ IT control environment, with primary accountability for Sarbanes‑Oxley (SOX) IT compliance and broader technology risk governance.
This role leads the build, efficiency automation and oversight of our SOX ITGC and Technology GRC risks and controls across a modern and sophisticated platform leveraging multiple cloud environments and third‑party providers.
This role will partner closely with Finance, Internal Audit, External Audit, Global Cyber GRC, Enterprise Risk, Insurance and all technology leaders to ensure audit readiness, control effectiveness, and enterprise risk clarity at the Board level. The leader will own and drive reporting across all our controls and lead engagement with Group CIO, ensuring prioritized focus on all things risk and compliance.
What You’ll Do
SOX IT General Controls Leadership
Lead and oversee the annual SOX scoping, risk assessments, walkthroughs, testing coordination, and deficiency evaluation efforts across in‑scope SOX systems and controls in Flutter Functions.
Lead the relationship with Finance (Internal Controls Testing and Assurance teams) and external auditors. Provide challenge and leadership for scoping, testing and remediation review.
Drive education and accountability with the control owner community on the execution and evidencing of relevant IT General Controls.
Oversee remediation of control gaps and ensure timely resolution of audit findings. Drive clarity on remediation position with all relevant partners.
Serve as primary liaison with Internal and External Auditors for ITGC matters.
Partner with colleagues in Strategy and Enterprise Architecture to ensure we design and build systems to optimise for SOX and our NIST CSF 2.0 cybersecurity framework.
Technology Governance & Risk Management
Oversee the development and implementation of the Flutter Functions cyber and technology risk management strategy aligned with the Global Cyber Risk Management Framework and Enterprise Risk Management Framework.
Lead a team of GRC professionals to drive innovative and accurate ways of maintaining a continuous view of our cyber control environment.
Drive advanced approaches to resolving risk and controls posture leveraging AI and modern toolsets.
#J-18808-Ljbffr