Control COE Lead

About the role

The Control COE Lead is responsible for developing, governing, and continuously improving the enterprise-wide control framework within Digital & Technology. The role leads the design, simplification, automation, standardisation, and rationalisation of controls across D&T, ensuring the control environment is efficient, modern, risk‑based, and aligned to regulatory, audit, and operational expectations.

What you'll do

• Lead the enterprise-wide redesign, simplification, and optimisation of the D&T control environment, including control mapping, duplication elimination, standardisation
• Define and maintain D&T control standards, methodologies, and frameworks, ensuring alignment with SOx, ITGC, cybersecurity, and privacy control expectations
• Drive automation of controls and evidence collection, partnering with engineering, automation teams, and GRC tooling teams to enable continuous monitoring
• Oversee the rationalisation of existing controls, including removal of redundant or ineffective controls, consolidation of overlapping controls
• Provide expert advisory support to control owners, product teams, architects, and risk & compliance

What you need

• SOX
• Internal audit
• Internal controls
• SAP
• Audit
• Compliance

Good to have

• CISA
• ServiceNow