Financial Governance Senior IT Risk Associate

About The Role

Join our Global Internal Audit (GIA) Team and be the key point of contact for IT Risk and Compliance matters. At GIA, we’re on a mission to continuously improve Amcor’s risk and control universe. Our growing team boasts a wealth of experience and skills, positioning us perfectly to elevate our internal controls to new heights. As we embark on this exciting journey, we’re seeking a Senior IT Risk Associate. You will be responsible for working with our Corporate IT department, business groups, control owners, third party consultants, and Amcor’s internal and external auditors to further strengthen our control environment. We are looking for a collaborative and hands-on individual, experienced in driving efficient and effective internal control frameworks in complex organizations. Reporting to our GIA IT Risk Manager, the incumbent of this role will be experienced in IT risks and internal controls.

Key Job Accountabilities

Influence our internal control strategy

• Staying ahead of rapidly evolving risks requires understanding and evolving with the current environment. As an IT risk specialist, you will be able to actively contribute to defining and implementing our new generation of IT controls by continuously challenging status-quo and exploring new ways of providing further assurance to the Board through:
• Building a risk-based controls framework that is driven by data;
• Maximizing the use of technology in operating and monitoring controls;
• Exploring automation solutions within the control environment, to enhance efficiency while increasing risk coverage;
• Embedding the controls framework in the first-line day-to-day business;
• Introducing a positive controls culture to guide the business to achieve its goals.

Control Design Effectiveness Testing

• Take responsibility for planning, organizing and performing SOX control walkthrough meetings and ensure close collaboration with Amcor’s external auditors;
• Conduct project fieldwork at in-scope IT systems and processes in relevant geographies;
• Perform control walkthroughs and evaluate control design effectiveness for in-scope IT processes;
• Update IT risk and control matrices and process documentation, as needed
• Document IT control design deficiencies and gaps;
• Document control design testing results in the Governance Risk and Compliance (GRC) tool;
• Develop and agree on control design remediation plans.

Control Operating Effectiveness Testing

• Perform SOX control operating effectiveness testing for IT systems and processes such as IT General Controls (ITGCs), IT Automated Controls (ITACs) and Cyber-risk related controls;
• Perform agreed upon procedures on Information Produced by the Entity (IPE), as applicable, for controls being tested;
• Complete operating effectiveness testing and document testing results for each control, including a summary testing matrix and supporting evidence;
• Perform quality review of operating effectiveness and IPE testing documentation and incorporate feedback into final deliverables;
• Document control operating effectiveness deficiencies within the testing matrix and deliver to GIA and IT Compliance Teams for further action.

GRC Tool Support

• Enhance our internal GRC capabilities by identifying and developing new tool functionalities;
• Make updates to Amcor’s GRC platform and/or content as required.

Reporting

• Conduct post-audit meetings with the control owners to review results and discuss findings;
• Partner with Amcor Business Groups and Group IT on actions to remediate findings;
• Draft report to summarize issues for each audit.

Qualifications/Requirements

• Bachelor’s degree in IT, Finance or Business, CISA and/or Certified Internal Auditor preferred;
• 2+ years’ experience in an internal controls / internal or external audit / IT risk management environment preferably gained in a large global Corporate and/or a Big 4 Accounting firm;
• Strong and practical working knowledge of current SOX requirements preferably in the Manufacturing sector;
• Demonstrated IT risk and controls knowledge;
• End-to-end process minded, experience with data analytics a plus;
• Strong working knowledge of Excel and Data Analytics a plus;
• SAP knowledge is a plus;
• A natural curiosity for automation and innovation;
• Experience with setting up and utilizing various GRC Tools;
• Experienced in working in a diverse and multi-cultural / multi-national environment;
• Up to 20% travel.

#LI-Onsite