Senior Principal, Digital Governance

Schneider Electric•Boston, MA

11d

About The Position

Schneider Electric is seeking a senior-level Enterprise IT General Controls (ITGC) professional to help strengthen and mature our global IT controls and risk management program. In this highly visible individual contributor role, you will serve as a subject matter expert and trusted advisor, partnering across Digital, Finance, Internal Control, Audit, Cybersecurity, and Enterprise Architecture teams to ensure effective IT controls, audit readiness, and regulatory compliance. You will play a key role in supporting the design, execution, monitoring, and continuous improvement of IT General Controls across enterprise applications, infrastructure, cloud platforms, and third-party services that support business operations and financial reporting. This position offers the opportunity to influence a global control environment, drive meaningful improvements, and help shape a growing governance program within Schneider Electric. The Enterprise IT General Controls Specialist is responsible for supporting the design, operation, monitoring, and continuous improvement of the Enterprise IT General Controls (ITGC) framework. This role helps ensure IT controls are appropriately defined, implemented, documented, monitored, and evidenced across in-scope applications, infrastructure, cloud services, third-party services, and digital platforms that support business operations, financial reporting, and regulatory compliance objectives. The specialist will help align ITGC, Internal Control over Financial Reporting (ICoFR), cybersecurity, resilience, audit, and risk management activities. Working closely with control owners, IT leaders, Internal Control, Internal Audit, external auditors, Cybersecurity, Enterprise Architecture, and operational teams, this position helps improve control execution, evidence quality, remediation management, and overall audit readiness.

Requirements

Bachelor's degree in Information Technology, Cybersecurity, Accounting Information Systems, Risk Management, Business, Finance, or a related field required; Master's degree preferred.
Professional certification such as CISA, CRISC, CISM, CISSP, CGEIT, ITIL, PMP, or equivalent preferred.
Working knowledge of ITGC, ICoFR, IT Application Controls (ITAC), SOX-style control environments, and the Three Lines of Defense model.
7+ years of experience in IT risk, IT audit, internal controls, cybersecurity governance, digital governance, enterprise applications, or a related discipline.
Experience supporting internal or external audits, including walkthroughs, evidence collection, issue management, remediation tracking, and management responses.
Experience operating within global, matrixed organizations and collaborating across diverse stakeholder groups.
Experience with ERP platforms, SaaS solutions, cloud technologies, identity and access management, change management, IT operations, and audit management platforms.
Strong understanding of IT control domains, including: Access management, Change management, Backup and recovery, SDLC, IT operations, Segregation of duties, Logging and monitoring, Third-party controls.
Ability to translate technical control concepts into clear business, audit, and financial reporting impacts.
Strong organizational skills, follow-through, and attention to detail, with a practical approach to evidence quality and audit readiness.
Excellent written and verbal communication skills, including the ability to prepare executive summaries and leadership updates.
Ability to manage multiple priorities, work effectively under pressure, and build alignment among technical and non-technical stakeholders.
Experience using tools such as ServiceNow, Resolver, AuditBoard, SAP GRC, SailPoint, Microsoft 365, and reporting/dashboard solutions.

Nice To Haves

Experience within a Big Four consulting firm, external audit, internal audit, corporate governance, or enterprise risk environment.
Experience supporting financial reporting systems, ERP transformation initiatives, or global controls harmonization programs.
Familiarity with ICoFR self-assessments, management action plan governance, control owner processes, and audit committee reporting.
Knowledge of frameworks and standards such as COBIT, ISO 27001, NIST, ITIL, COSO, and SOX-related audit practices.

Responsibilities

Apply the Enterprise ITGC policy and control catalog across assigned systems, platforms, and control domains.
Support control design and operating effectiveness activities for: User access management, Privileged access management, Joiner-Mover-Leaver (JML) processes, Change management, Software Development Lifecycle (SDLC), IT operations, Backup and recovery, Segregation of duties, Data management, Cloud controls, Third-party controls.
Maintain practical control guidance, evidence expectations, and execution routines for control owners and IT stakeholders.
Identify control gaps, recurring exceptions, ownership issues, and areas where policy requirements have not been implemented as intended.
Support the mapping of ITGCs to ICoFR risks and financial reporting dependencies, including applications, reports, interfaces, access rights, automated controls, and key technology dependencies.
Collaborate with Internal Control and Finance stakeholders to confirm in-scope systems and control expectations for financial reporting and Corporate Sustainability Reporting Directive (CSRD)-related processes.
Support the annual refresh of ITGC and ICoFR risk mappings, including control ownership, monitoring routines, and evidence requirements.
Help translate technical control requirements into clear business impacts, financial reporting relevance, and audit-ready control descriptions.
Assist with the coordination of internal and external audits related to ITGC, ICoFR, cybersecurity, resilience, and digital governance.
Prepare audit requests, walkthrough materials, control narratives, evidence packages, and responses in partnership with control owners and technology teams.
Track findings, management action plans, due dates, remediation progress, ownership, and evidence of closure.
Escalate issues when evidence is missing, action plans are unclear, deadlines are at risk, or additional leadership alignment is required.
Promote consistent, timely, and complete evidence submission for audit and control testing activities.
Validate that remediation activities include clear ownership, target completion dates, supporting evidence, and sustainable preventive measures.
Prepare concise status reports, dashboards, and executive-level summaries.
Leverage available tools and structured repositories to improve visibility, traceability, evidence retrieval, and follow-up effectiveness.
Partner with IT leaders, process owners, Cybersecurity, Enterprise Architecture, Data teams, Internal Control, and Audit teams to improve control maturity.
Provide practical guidance to stakeholders on control expectations, audit preparation, and remediation standards.
Identify opportunities to simplify control execution, reduce manual effort, improve data quality, and increase automation where appropriate.
Support awareness, training, and communication activities that strengthen accountability, ownership, and control culture throughout the organization.
Support control alignment across ERP platforms, SaaS solutions, cloud environments, infrastructure services, and business-critical applications.
Coordinate with application and infrastructure owners to ensure disaster recovery, backup, logging, monitoring, and access control expectations are reflected in control and audit evidence.
Review third-party control dependencies, including SOC reports and service provider control evidence, where they support financial reporting or operational resilience objectives.
Help identify risks resulting from fragmented ownership, system changes, tooling gaps, manual reconciliations, or incomplete control documentation.