Job Description

The IT Governance Manager establishes, maintains and continuously improves HOYA's enterprise IT governance and internal-control management framework across Group Digital, Divisional IT and Affiliate IT.

The role provides the overarching governance mechanism to ensure that IT policies, standards, controls, decision rights, ownership, evidence, exceptions, deficiencies and remediation activities are consistently managed across HOYA's federated IT environment.

The IT Governance Manager works closely with Security Risk & Policy and other Group Digital control owners while maintaining clear accountability boundaries. The role does not operate every underlying control, own security risk or security-control oversight, coordinate Internal Audit, or perform independent assurance.

Scope of the Role

. IT governance policies, standards, decision rights, delegated authorities, forums, records and escalation mechanisms.

. Enterprise control ownership mapping, consolidated control register, minimum evidence requirements, management self-assessment, monitoring and remediation tracking.

. Governance and non-security controls spanning architecture, applications, infrastructure, service management, projects and portfolio, vendors, technology operations, ownership, and applicable IT financial or procurement interfaces.

. Cross-functional controls and dependencies spanning Group Digital functions, Divisional/Affiliate IT, business owners, system owners, service owners, vendors and enabling functions.

. Consolidated visibility of governance compliance, control deficiencies, governance exceptions and remediation across the federated environment.

Qualifications
. Bachelor's degree in Information Technology, Information Systems, Computer Science, Business, Risk, Governance or a related discipline.

. Approximately 10+ years of relevant experience in IT governance, IT controls/GRC, technology risk, compliance or technology transformation.

. Demonstrated experience designing and operating enterprise IT governance frameworks.

. Practical experience with control registers, ownership models, evidence, management self-assessment, monitoring, remediation, exceptions, escalation and reporting.

. Experience collaborating with Security, Risk, Compliance and assurance functions while maintaining clear accountability boundaries.

. Experience in a global, matrixed or federated organization.

. Strong understanding oftechnology governance and controls across applications, infrastructure, servicemanagement, change, access, vendors, projects and operations.

. Strong executive communication, facilitation, influencing and stakeholder-management skills.

. Ability to challenge senior stakeholders constructively and convert policy into practical, proportionate requirements.