Head of IT General Controls
Right across infrastructure, there’s a requirement to not only maintain, but also renew and reimagine. Whatever stage you’re at in your career, with us you’ll have an opportunity to grow and develop. Delivering essential infrastructure services for life, while being safety first, and client and customer centric in a friendly, fun and respectful environment where you are encouraged to thrive.
Where will you be working?
As an organisation, there is little we don’t do and plenty to get involved in. Our Group Support roles are vital in making sure we can help over 11,000 people deliver essential infrastructure seamlessly across water, energy, transport and telecom.
Want to come and be a part of it?
What will you be doing?
Lead the ITGC Strategy — define, implement, and continuously improve the organisation’s Information Technology General Controls framework in alignment with industry best practice, regulatory requirements, and internal governance.
Oversee IT Governance & Compliance — ensure systems, processes, and change management activities consistently meet SOX, ISO 27001, and other relevant standards.
Vendor & Third-Party Risk Management — manage relationships with technology service providers, ensuring they meet agreed control, compliance, and security standards.
Control Testing & Assurance — design and oversee periodic reviews, audits, and assessments of IT controls, coordinating with both internal and external auditors.
Risk Management & Remediation — proactively identify IT control deficiencies, assign corrective actions, and track through to resolution.
Policy & Process Ownership — establish, maintain, and communicate IT policies, standards, and procedures to ensure compliance is embedded in daily operations.
Project Governance — ensure all IT change initiatives follow the agreed governance model, with controls embedded from design through to post-implementation.
Stakeholder Engagement — maintain strong relationships with leadership, internal audit, risk teams, and business units to ensure alignment and transparency on IT control matters.
Reporting & Metrics — produce executive-level reports and dashboards on ITGC compliance status, control trends, and risk posture.