Manager of IT Change and Controls

Harvest Hill Beverage Company•Cincinnati, OH

2d•Onsite

About The Position

The Manager of IT Change and Controls will lead the development, execution, and continuous improvement of Harvest Hill’s IT change management and IT general controls processes. Reporting to the Chief Information Officer and based in Cincinnati, OH, this role will help ensure that technology changes are appropriately documented, assessed, approved, tested, implemented, and reviewed in a controlled manner. The position will partner closely with IT, cybersecurity, internal audit, external auditors, and business stakeholders to strengthen the company’s control environment, reduce operational risk, and support reliable IT services across the enterprise. This role requires a highly organized, detail-oriented leader with strong communication skills, sound judgment, integrity, and the ability to influence cross-functional teams.

Requirements

Bachelor’s degree in Information Technology, Computer Science, Accounting Information Systems, Business, or a related field; equivalent experience may be considered.
5+ years of relevant experience in IT change management, IT controls, IT audit, IT risk management, compliance, cybersecurity governance, or IT service management.
Strong understanding of IT general controls, including change management, logical access, IT operations, backup and recovery, privileged access, and segregation of duties.
Experience supporting internal or external audits, control testing, evidence collection, remediation tracking, and audit-ready documentation.
Familiarity with ticketing platforms and change management workflows.
Demonstrated ability to manage multiple priorities, meet deadlines, and drive accountability across cross-functional teams.
Strong analytical, problem-solving, documentation, and process improvement skills.
Excellent written and verbal communication skills, including the ability to communicate control requirements and risk concepts to technical and non-technical stakeholders.
Ability to work independently while collaborating effectively with IT, finance, operations, audit, and business teams.
Ability to travel as needed, typically less than 10% of the time.

Nice To Haves

Knowledge of Microsoft 365, Azure, Active Directory, ERP environments, and enterprise application control concepts preferred.
Experience with Microsoft Dynamics AX, Dynamics 365, or other ERP platforms preferred.
Professional certifications such as ITIL, CISA, CISM, CRISC, CISSP, PMP, or equivalent are preferred.
Experience working in a manufacturing, consumer products, or multi-site environment preferred.

Responsibilities

Own and manage the IT change management process, ensuring changes are properly submitted, reviewed, risk-assessed, approved, tested, implemented, documented, and closed.
Chair and coordinate Change Advisory Board (CAB) meetings, including preparation of agendas, review of upcoming changes, tracking of approvals, and communication of decisions.
Develop, maintain, and enforce IT change management policies, standards, procedures, and supporting documentation.
Partner with application, infrastructure, and business teams to assess the operational, security, compliance, and business impact of technology changes.
Monitor emergency, standard, and normal changes to ensure adherence to defined processes and appropriate evidence retention.
Lead post-implementation reviews for significant or high-risk changes, identifying lessons learned and driving process improvements.
Support the design, documentation, monitoring, and testing of IT general controls, including logical access, change management, IT operations, backup and recovery, and segregation of duties.
Coordinate with internal audit, external auditors, and control owners to support IT control walkthroughs, evidence requests, testing activities, remediation plans, and audit readiness.
Identify IT control gaps, document risks, recommend remediation actions, and track corrective actions through completion.
Develop and maintain reporting on change management performance, control compliance, open risks, audit findings, remediation status, and key IT governance metrics.
Provide guidance and training to IT teams and business stakeholders on change management expectations, control requirements, documentation standards, and process compliance.
Support IT governance initiatives, including process standardization, ITSM improvements, policy development, risk management, and continuous improvement efforts.
Provide timely, concise communication to the CIO and IT leadership regarding change activity, control performance, risks, issues, and recommended actions.