Mgr Internal Controls - General Computing Controls (GCC) SoX Testing - Global

As Global IC GCC SoX Testing Manager you are primary responsible for driving and overseeing the company’s General Computing Controls SoX testing program globally that supports internal controls, IS and business functions in managing IS related SOX risks.
You are leading and defining the annual SoX GCC IS testing plan in line with MDLZ business SoX scope and strategy in order to identify, manage and mitigate company’s IS risks effectively.
The role holder will be also responsible for overseeing the Center of Excellence teams and ensuring that GCC SoX testing activities are thorough, complete, and performed in accordance with Standard Operating Procedures (SOPs), SLA and KPIs and results are effectively communicated to senior management and where relevant, external auditors in alignment with GCC SoX testing reporting calendar.
Last but not least, you lead initiatives to drive GCC control self-assessments (GCC Questionnaires) and initiatives to further automate and optimize SoX testing activities in order to drive further efficiencies. It is essential to establish effective relationship within the company and other stakeholders (IS Function, Business Function), including external auditors and the global IC COE teams, and assist management in effective and efficient identification of IS SoX relevant risks.

Main responsibilities:

• Conduct annual GCC SoX risk assessment to support designing process of the annual GCC SoX testing plan.
• Lead and manage end to end GCC SoX testing cycle process (planning, execution, reporting).
• Effectively manage GCC SoX CoE activities and coordinate with internal teams, regional management, functional management and external auditors.
• Development of CoE resources on contractor's side (performance review, career path development, training, guest auditor program)
• Ensure that all CC SoX testing work is thorough, complete, and has been performed in accordance with MDLZ IA SLAs/KPIs (timeliness, quality of deliverables, coverage), MDLZ SoX standards and other relevant industry standards (ISO/ITIL, etc.) depending on focus area of the review.
• Develop and maintain viable working relationships with IS teams, IA teams, Regional Internal Controls, Regional Management and Business Process Excellence Leads.
• Prepare and publish GCC reports summarizing results of GCC SoX testing.
• Ensure that audit results are effectively communicated to senior management and external auditors.
• Build strong working relationships with MDLZ IS leadership and their respective teams.