Senior Manager, IT Governance, Risk and Compliance

Job Description:

• Support the Senior Director of IT Governance, Risk and Compliance in building the overall compliance strategy and roadmap
• Implement and provide day-to-day support for an enterprise Governance, Risk and Compliance platform, including risk and control matrix automation, evidence collection workflows, and executive reporting and dashboards
• Track and deliver key compliance initiatives, including executive status updates
• Provide frontline compliance process support and subject matter expertise to system leads and business partners
• Establish, document, and maintain IT compliance requirements
• Lead process redesign efforts to identify and eliminate redundant risk management processes and controls
• Maintain inventories of in-scope systems and applications, IT projects, and stakeholders
• Maintain IT compliance documentation and templates, including risk and control matrices, process flows, system interface documentation, and remediation plans
• Review system lead and control owner documentation for quality, completeness, and compliance alignment
• Support internal and external audits, including SOX and IT General Controls testing
• Collect and maintain audit evidence for audit requests and management reviews
• Identify, track, and remediate control gaps, deficiencies, and action plans
• Support risk assessments, control reviews, and compliance evaluations
• Monitor control-environment metrics, including reconciliation activities, data analysis, and data hygiene
• Track application system-owner adherence to access termination processes and conduct look-back analyses
• Execute continuous monitoring processes
• Prepare management reporting on compliance status, risks, remediation efforts, and control effectiveness
• Document, maintain, and socialize training materials related to IT compliance, data privacy, and security practices
• Support awareness efforts promoting accountability and compliance

Requirements:

• 5+ years experience in IT compliance, IT audit, risk management, cybersecurity compliance, or a related governance function
• Hands on experience developing and maintaining Risk and Control Matrices, process flows, remediation plans, system inventories, and related compliance documentation
• Demonstrated experience supporting cross-functional stakeholders such as Legal, IT, Security, Internal Audit, Finance, and business leads
• Bachelor’s degree in Computer Science, Information Systems, Information Security, Accounting, Finance, or a related field preferred
• Demonstrated experience supporting SOX and IT General Controls in a complex public company environment
• Experience supporting compliance activities in connection with mergers and acquisitions
• Experience managing third-party assurance processes, including SOC report review and evaluation
• Familiarity with enterprise control frameworks such as NIST and ISO 27001
• Knowledge of SAP (S/4) a plus
• Strong knowledge of SOX, ITGC, and general compliance frameworks
• Advanced proficiency in Excel with a strong working knowledge of PowerQuery, SQL, or similar tools preferred
• Understanding of access management, vendor management, change management, and audit evidence requirements
• Strong analytical and problem-solving skills with exceptional attention to detail
• Excellent written and verbal communication skills, including the ability to communicate technical concepts to non-technical stakeholders
• Preferred certifications include CISA, CISSP, or CRISC

Benefits:

• Base rate along with, as applicable, short- and long-term incentives
• Growth and developmental opportunities
• Health care
• Retirement
• Vacation and other paid time off
• Additional offerings
• Reasonable accommodations for qualified individuals with disabilities in accordance with the ADA and applicable state or local laws