• Architect the controls framework — design the internal controls framework for S/4HANA, mapping business-process risks to preventive and detective controls, and defining how those controls are configured, automated, and evidenced within the system. • Own SoD & access-risk strategy — partner with the security/authorization team on rule-set design/optimization, risk analysis, remediation, and mitigating controls. • Automate process controls — define configurable controls embedded in S/4HANA processes (e.g., three-way match, tolerances, approval/release strategies, posting-period and document controls) and replace manual controls with system-enforced ones. • Support SOX / ICFR — design the control catalog, define control objectives and key controls, align with the Risk and Control Matrix (RACM), and produce audit-ready evidence. • Partner with audit & finance — work with internal audit, external audit, and finance to scope controls, respond to findings, and drive remediation to closure. • Design controls in from the start — advise project and functional teams during S/4HANA implementations and enhancements to ensure 'controls by design' rather than retrofitted controls. • Embed a controls culture — develop standards, documentation, and training to strengthen controls and compliance across process and technology teams | 