Senior Director, IT Governance and Security Controls
Job Description Summary:
Overview
The Senior Director I, IT Governance and Security Controls reports to the Leader of IT Governance and Compliance team and is responsible for leading the execution of the organization's IT governance, SOX compliance, and risk management programs. This role serves as a key leader within the second line of defense, driving day-to-day operations, strategic initiatives, and continuous improvement efforts that strengthen the overall IT controls environment and governance framework.
The Senior Director partners closely with IT, Finance, Corporate Audit, external auditors, and business stakeholders to ensure effective management of SOX IT General Controls (ITGCs), support regulatory compliance requirements, and proactively identify and mitigate technology-related risks. This leader also plays a critical role in developing executive-level communications, governance reporting, and strategic materials for senior leadership, while helping translate organizational priorities into actionable programs and measurable outcomes.
Additionally, this role supports the evolution of governance capabilities through the evaluation and adoption of automation, analytics, and artificial intelligence solutions that enhance risk monitoring, compliance oversight, and decision-making across the enterprise.
Key Responsibilities
Governance & Program Leadership
Partner with the Leader of IT Governance and Compliance team to execute the global IT Governance and Compliance strategy, priorities, and operating model.
Lead day-to-day operation of the IT Governance and Compliance function, ensuring objectives, milestones, and compliance commitments are achieved.
Drive governance programs that strengthen control maturity, risk management, and operational effectiveness across global IT environments.
Establish and monitor key performance indicators (KPIs), compliance metrics, and program health measures to support informed leadership decision making.
Support the development and implementation of governance policies, standards, procedures, and control frameworks.
IT Controls & Compliance Oversight
Oversee the execution and quality of SOX IT General Controls (ITGCs) across globally in-scope systems.
Provide direction on control design, implementation, monitoring, and optimization activities.
Drive consistency in quality assurance reviews, deficiency evaluations, and remediation execution.
Support governance oversight for key risk areas, including User Access Reviews (UARs), Segregation of Duties (SoD), privileged access management, and automated controls.
Ensure compliance activities align with regulatory requirements, PCAOB expectations, and company policies.
Risk Management & Strategic Initiatives
Lead enterprise-wide IT compliance and risk initiatives designed to reduce risk and improve governance effectiveness.
Partner with technology and business leaders to identify emerging risks and develop mitigation strategies.
Lead the evaluation and adoption of automation, analytics, continuous controls monitoring, and artificial intelligence capabilities to enhance governance oversight, risk identification, compliance monitoring, and operational efficiency.
Partner with technology and business stakeholders to define and implement governance tooling strategies, including access governance, controls automation, risk management, and compliance technologies.
Support implementation of new technologies, acquisitions, and transformation initiatives to ensure governance and compliance requirements are incorporated early in the project lifecycle.
Drive continuous improvement efforts focused on efficiency, scalability, and sustainability of compliance processes.
Executive Reporting & Stakeholder Engagement
Lead the development and coordination of executive Steering Committee, Audit Committee, and Board-related governance reporting, ensuring clear communication of compliance risks, control environment health, and remediation activities.
Serve as a senior liaison with Internal Audit, Corporate Audit, external auditors, Finance leadership, and IT executives.
Present program updates, risk assessments, and strategic recommendations to senior leadership and governance forums.
Facilitate alignment across stakeholder groups to drive timely resolution of compliance and risk-related matters.
People Leadership & Organizational Development
Provide leadership and oversight across multiple governance workstreams and management layers, ensuring effective prioritization, resource allocation, and execution of strategic initiatives.
Foster an environment of accountability, collaboration, innovation, and continuous improvement.
Support workforce planning, talent development, succession planning, and organizational growth initiatives.
Promote knowledge sharing and development of governance, compliance, and risk management capabilities across the team.
Qualifications
Bachelor's degree in Information Technology, Information Systems, Accounting, Finance, Business, or related field.
12+ years of progressive experience in IT governance, SOX compliance, internal controls, IT audit, risk management, or related disciplines.
7+ years of leadership experience managing teams within large, global organizations.
Deep understanding of SOX ITGCs, PCAOB requirements, IT risk management, and governance frameworks.
Experience leading enterprise compliance, risk, audit, or governance programs.
Strong executive presence with demonstrated experience preparing and presenting materials to senior leadership and governance committees.
Experience with SAP environments, access governance, and GRC solutions preferred.
Knowledge of emerging technology risks, automation, data analytics, and AI-enabled governance capabilities.
Professional certifications such as CISA, CPA, CRISC, CISM, or equivalent.
What We’ll Do For You
Innovation: We embrace a culture of experimentation and innovation, providing you the opportunity to contribute to new, different, or better ways of doing things.
Agile Work Environment: We embrace agile with management that believes in removing barriers, so you are empowered to experiment, iterate, and innovate.
Industry Leaders: Collaborate with leaders in the industry. Our team is composed of professionals who are experts in their fields, providing an environment where you can learn, grow, and make a significant impact.
Skills:
Artificial Intelligence (AI), Executive Presence, Information Technology (IT) Risk Management, Information Technology General Controls (ITGC), IT Governance Risk and Compliance (GRC), PCAOB Auditing Standards, SAP Applications, SOX Compliance AuditPay Range:
United States: 202,000 - 229,000 USDBase pay offered may vary depending on geography, job-related knowledge, skills, and experience. A full range of medical, financial, and/or other benefits, dependent on the position, is offered.
Location(s):
United States of AmericaCity/Cities:
AtlantaTravel Required:
00% - 25%Relocation Provided:
NoJob Posting End Date:
October 2, 2026Our Purpose and Growth Culture:
We are taking deliberate action to nurture an inclusive culture that is grounded in our company purpose, to refresh the world and make a difference. We act with a growth mindset, take an expansive approach to what’s possible and believe in continuous learning to improve our business and ourselves. We focus on four key behaviors - curious, empowered, inclusive and agile - and value how we work as much as what we achieve. We believe that our culture is one of the reasons our company continues to thrive after 130+ years. Visit Our Purpose and Vision to learn more about these behaviors and how you can bring them to life in your next role at Coca-Cola.
We are an Equal Opportunity Employer and do not discriminate against any employee or applicant for employment because of race, color, sex, age, national origin, religion, sexual orientation, gender identity and/or expression, status as a veteran, and basis of disability or any other federal, state or local protected class. When we collect your personal information as part of a job application or offer of employment, we do so in accordance with industry standards and best practices and in compliance with applicable privacy laws.