IT Controls Manager

Halliburton - Houston, TX

Part-time,Full-time - Mid Level

Houston, TX

5,001-10,000 employees

Support Activities for Mining

About the position

The IT Controls Manager will play a crucial role in the Internal Assurance Services department, focusing on the design and monitoring of IT General Controls while ensuring compliance. This position also involves active participation in the S4 implementation team, particularly concerning Security and Governance, Risk, and Compliance (GRC) processes. The ideal candidate will be a strategic thinker with a robust background in IT Controls, SAP security, and GRC frameworks.

Responsibilities

• Manage the design of IT General Controls and testing, and monitor remediation of IT control deficiencies.
• Quarterly reporting on results of IT Control testing.
• Manage the segregation of duties process, including identification, elimination/mitigation of conflicts, and monitoring of mitigation controls for accepted segregation of duties.
• Assist business process teams in role design for S4 and other applications, ensuring adherence to role design strategy.
• Handle exceptions for sensitive role assignments and provisioning during go-lives.
• Assist business process teams in defining segregation of duties rules for S4 and resolving any violations or defining mitigation controls.
• Assist users with SOD violations, role issues, and GRC provisioning.
• Work with the GRC team on necessary system customizations.
• Coordinate review of access for users and assist in the implementation of a new User Access Review application.

Requirements

• Bachelor's degree in information technology, Computer Science, Business Administration, or a related field.
• Proven experience in IT Controls, GRC, and SAP S4 role design processes.
• Experience with IT SOX controls is a strong plus.
• Strong analytical and problem-solving skills.
• Excellent communication and interpersonal skills to collaborate among different teams and stakeholders.
• Familiarity with SAP S/4, GRC, Azure DevOps, AuditBoard (SOXHub), and role management processes.
• Relevant certifications (e.g., CISA) are a plus.

Nice-to-haves

• Experience in SOX compliance.
• Certifications such as CISA.