The posting
- Shape the technology control environment for Rio Tinto’s enterprise-wide transition to SAP S/4HANA.
- Build your influence across a major transformation, working with senior technology, assurance and external audit stakeholders.
- Brisbane-based 12 month opportunity offering broad exposure across Modern ERP and Information Systems and Technology.
We’re Finding Better Ways™ to provide materials the world needs, now and in the future. Our values – care, courage and curiosity – guide how we work and how we treat each other.
About the role
We are looking for a Principal Advisor – IT SOX Compliance to help the Controls and Assurance team a deliver a robust and audit-ready technology control environment as Rio Tinto transitions to SAP S/4HANA. In this role, you will support the Modern ERP IT SOX Compliance Manager with planning, coordination and delivery of the Modern ERP Information Technology Sarbanes-Oxley compliance program, providing specialist advice across complex SAP controls, assurance testing and remediation. This is an opportunity to influence how technology controls are designed, evidenced and sustained across a transformation of significant scale and complexity.
What you’ll be doing
Reporting to the Modern ERP IT SOX Compliance Manager and working across the Modern ERP Controls and Assurance team, Information Systems and Technology, control owners and assurance providers, you will be:
- Lead assurance delivery for an agreed portfolio of technology controls, systems or deployment scope, providing clear and defensible advice on complex SAP control matters. Acts as the specialist reference point for MERP IT SOX Compliance Manager for a defined IT SOX domain, interpreting requirements and providing defensible technical advice on complex SAP control matters.
- Plan and drive control walkthroughs, interviews and testing with external auditors, management testers, control owners and Information Systems and Technology teams. Assess control design, implementation and operating effectiveness, and review control documentation, work papers and evidence against Sarbanes-Oxley and assurance requirements.
- Lead analysis of complex or disputed control issues, evaluates root causes and compensating controls, and develops sustainable remediation recommendations.
- Coordinate remediation from action planning through evidence validation and retesting, challenging delays and escalating material risks or unresolved matters. Lead technical discussions with auditors and control owners, resolve differing interpretations and provide timely program context and responses to evidence requests.
- Maintain an integrated view of milestones, dependencies, testing progress, findings and remediation actions, supported by accurate metrics, dashboards and status reporting. Maintain a consolidated view of MERP IT SOX compliance, including key milestones, dependencies, testing progress, findings, remediation actions, and accurate compliance metrics and reporting.
- Provide timely insights and proactive escalation of Programme risks to MERP IT SOX Compliance Manager, control-readiness concerns, testing delays, remediation challenges, and unresolved assurance matters, driving stakeholder accountability and follow-up.
- Lead technical engagement with auditors and control owners, challenging inadequate responses, resolving differing interpretations, and escalating material issues appropriately.
- Coordinate effectively across controls, operations, Programme and assurance stakeholders, managing walkthroughs, evidence requests, auditor queries, follow-ups, dependencies, and emerging issues.
About you
We’re looking for someone whose experience aligns with the key requirements below. You do not need to meet every “Required for success” item to apply. If you bring relevant experience and are excited by the opportunity, we encourage you to submit an application.
Required for Success
- A commitment to the safety of yourself and your team.
- 7 + years of demonstrated experience delivering IT audits, technology risk, internal controls or assurance activities within a large and complex corporate environment.
- Strong knowledge of IT general controls, automated controls, information produced by the entity, segregation of duties, interfaces and system-generated reports in SAP environments.
- Strong experience supporting Sarbanes-Oxley audits or compliance programs, including control-design assessment, operating-effectiveness testing, evidence evaluation and remediation tracking.
- Experience coordinating assurance activity across external auditors, management testers, business process owners, technology teams and senior stakeholders.
- A qualification in information systems, information technology, accounting, finance, business, risk management or related discipline, or equivalent practical experience.
Helpful for Success
- Experience supporting a large-scale ERP transformation or SAP S/4HANA implementation and understanding how system and deployment changes affect the control environment.
- Knowledge of Public Company Accounting Oversight Board expectations and experience reviewing testing workpapers against internal and external assurance standards.
- Experience developing compliance dashboards, program reporting or assurance metrics to support decisions and escalation.
What we offer
- Be recognised for your contribution, your thinking and your hard work, and go home knowing you’ve helped the world progress
- Attractive compensation that is aligned to the specialist nature and impact of the role
- Flexible working arrangements
- A safety-focused and inclusive working environment
- Career development to further your ambitions
- Ongoing individual wellbeing support
- Flexible working arrangements
- Be part of Rio Tinto’s global Modern ERP transformation, contributing directly to one of the organisation’s most significant multi‑year programs
- High‑impact contract role where your expertise helps shape the future of Planning & Reporting across a global enterprise
Where you’ll be working
You’ll join the Modern ERP Program — a multi‑disciplinary team bringing together technology, process, data and change specialists to reshape how work happens across Rio Tinto. We’re modernising a 20‑year‑old ERP system and redesigning core business processes to improve safety, efficiency and ignite innovation.
This work supports our people across global operations to spend less time on transactional tasks and more time on work that really matters. By simplifying and digitising how the organisation runs, the Modern ERP Program is creating the foundation for future productivity gains, smarter decision‑making and AI‑enabled transformation.
Applications close on 15th November (Rio Tinto reserves the right to remove advertised roles prior to this date
#gts
About Rio Tinto
Rio Tinto is a leading global mining and materials company. We operate in 35 countries where we produce iron ore, copper, aluminium, critical minerals, and other materials needed for the global energy transition and for people, communities, and nations to thrive.
We have been mining for 150 years and operate with knowledge built up across generations and continents. Our purpose is finding better ways to provide the materials the world needs – striving for innovation and continuous improvement to produce materials with low emissions and to the right environmental, social and governance standards. But we can’t do it on our own, so we’re focused on creating partnerships to solve problems, create win-win situations and meet opportunities.
Respect and Inclusion
At Rio Tinto, we particularly welcome and encourage applications from Aboriginal and Torres Strait Islander people, women, the LGBTQ+ community, mature workers, people with disabilities and people from different cultural backgrounds.
We are committed to an inclusive environment where people feel comfortable to be themselves. We want our people to feel that all voices are heard, all cultures respected and that a variety of perspectives are not only welcome – they are essential to our success. We treat each other fairly and with dignity regardless of race, gender, nationality, ethnic origin, religion, age, sexual orientation or anything else that makes us different.
