Prudential’s purpose is to be partners for every life and protectors for every future. Our purpose encourages everything we do by creating a culture in which diversity is celebrated and inclusion assured, for our people, customers, and partners. We provide a platform for our people to do their best work and make an impact to the business, and we support our people’s career ambitions. We pledge to make Prudential a place where you can Connect, Grow, and Succeed.
Support the Group SOX Management Team in providing assurance on IT controls across Group, Regional, and Business Unit (BU) levels. This role leads to the oversight of the ITGC SOX annual assessment, including scope definition, milestone planning, and compliance program execution. Responsibilities include evaluating risks and control design, developing testing procedures, assessing results, and managing remediation plans. The role also contributes timely IT-related insights for Group Audit Committee reporting and partners with process and technology control owners to evaluate and enhance internal controls using frameworks such as COBIT and the Group SOX methodology.
This role also includes coordination with internal and external auditors to ensure consistent evaluation of control methodology and deficiencies and ensure a smooth collaborated SOX compliance program.
Key Responsibilities
- Lead IT controls testing with strong project management to ensure timely delivery of testing, including resource planning, scheduling, and stakeholder communication.
- Identify key focus areas and formulate review strategies to address these areas of high risk.
- Prepare SOX 404 compliance reports for the Group Audit Committee and BUs.
- Act as a subject matter expert on SOX 404 IT control issues and provide actionable recommendations.
- Manage and mentor a team of testers, providing regular performance feedback.
- Ensure alignment between IT and non-IT aspects of the SOX assessment.
Functional Responsibilities
- Lead the implementation and rationalization of the Group’s ITGC framework.
- Monitor regulatory changes affecting ITGC assessments and recommend process improvements to make the testing process more efficient.
- Build strong relationships with external auditors, internal audit (GwIA), technology stakeholders and across the BUs.
- Deliver training sessions to promote SOX 404 awareness across BUs.
- Oversee the end-to-end SOX 404 annual process, including scope setting, test planning, and issue remediation tracking and resolution. This includes review of annual test plans and test results across IT general controls, IT applications controls, User developed application controls, etc.
- Support senior stakeholders in ITGC-related matters, including deficiency management and reporting, annual SOX certification sign-off and Audit Committee paper or presentation decks.
Minimum Job Requirement
- Degree in Computer Science, Information Systems, Accounting, or related field.
- Relevant certifications (e.g., Cybersecurity, Cloud, Technology Risk, Audit).
- Experience in reputable audit firm or financial services or regional role in MNCs (8 to 10 years’ experience)
Other requirements
Proven leadership in managing teams and ITGC audits.
- Strong knowledge of COBIT, SOX 404, internal controls, and insurance industry practices.
- Experience in identifying and assessing complex IT risks and controls, to relate them to the wider business environment and dealing with issues independently with resolutions
- Excellent communication in clearly articulating audit, risk and compliance issues/matters and stakeholder management skills.
- Demonstrated ability to lead impactful initiatives (e.g., automation, dashboards, process improvements).
- Proven ability to influence decisions and foster a collaborative team environment.
- Experience in working and communicating with senior-level stakeholders.
- Experience in building relationships with internal and external auditors
- Ability to work independently.
- Willing to work long hours as and when required.
Prudential is an equal opportunity employer. We provide equality of opportunity of benefits for all who apply and who perform work for our organisation irrespective of sex, race, age, ethnic origin, educational, social and cultural background, marital status, pregnancy and maternity, religion or belief, disability or part-time / fixed-term work, or any other status protected by applicable law. We encourage the same standards from our recruitment and third-party suppliers taking into account the context of grade, job and location. We also allow for reasonable adjustments to support people with individual physical or mental health requirements.
