IT Compliance Senior Manager

Position Title:  IT Compliance, Sr. Manager  

What you’ll do

• In this role, you will facilitate the design, implementation, and evaluation of IT internal controls in accordance with Sarbanes Oxley ( SOX ) requirements. This role will primarily support SOX work all year round.
• Support the SOX scoping and planning from an ITGC perspective in collaboration with Internal and external auditors.
• Oversee and manage the timely completion of IT SOX controls testing in collaboration with internal and external auditors.
• Coordinate and interface with third-party co-source and external auditors to facilitate the delivery and analysis of SOX testing and results.
• Serve as a consultative advisor to business stakeholders and Technology to ensure timely and consistent implementation and remediation of controls, and IT process enhancements.
• Continuously improve the IT SOX program by leveraging technology, continuous monitoring, benchmarking of controls, data analytics, etc.
• This role will be instrumental in collaborating with key business partners, such as Privacy, Legal, Finance, HR, Cybersecurity and Customer Technical Teams, to provide recommendations on internal controls and process enhancements to IT and business stakeholders.
• Support other compliance regulations and activities globally. The organization’s compliance obligations include, but are not limited to, ISO 27001, SOC2, NIST CSF, KRITIS, NIS2, DORA, HIPAA, PCI, GDPR and customer audits which are largely NIST CSF or ISO 27001 based.
• Provide regular updates on control performance, compliance status, and remediation efforts.
• Provide leadership and oversight on the various system implementations, ensuring best practices are followed and systems adhere to defined control requirements during implementation.
• Additionally, partner with IT and business stakeholders to design and implement IT general and IT application controls to ensure a strong control environment after implementation* Stay current on new audit requirements issued by governing bodies such as the PCAOB, IIA, NIST etc.
• Build relationships with the IT control and process owners who are globally spread, to recommend enhancements and prioritize new processes designed to reduce costs, increase productivity, and establish best practice* Promote continuous improvements through cross-functional leadership and collaboration to drive and facilitate ongoing SOX and compliance training programs for IT process and control owners.
• Plan and manage direct activities of the team to align governance programs with the organization’s objectives and execute roadmap.
• Support the development and maintenance of IT policies.

What you’ll need 

• Bachelor's degree and 7+ years of applicable professional experience in Information Technology, Finance, Accounting, or Business with a minimum of 3+ years of leadership experience.
• Strong knowledge of Sarbanes-Oxley Act, the 2013 COSO Framework (COSO), and Control Objectives for Information and Related Technologies (COBIT) is required.
• Knowledge and experience with various global compliance regulations, such as, ISO 27001, SOC2, NIST CSF, KRITIS, CMMI, NIS2, DORA, GDPR, HIPAA, PCI is strongly desired.
• Excellent written and verbal communication skills with the ability to effectively interact with all stakeholders including senior leadership.
• Strong background in identifying risks, controls and opportunities for improvements associated with IT processes, developing, and executing audit test plans, and drafting reports with summary results for executives.
• Strong project management experience with history of balancing competing priorities and ability to adapt to the changing needs of the business while meeting deadlines.
• Demonstrated ability to build and maintain strong cross-functional relationships. 
• Relevant professional certifications such as, Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Certified Information Systems Professional (CISSP), Certified in Risk and Information Systems Controls (CRISC), CPA, ACCA, or other related certification are desired.
• Working knowledge of various operating systems, database platforms, cloud platforms, network and system architecture concepts and technologies, and System Development Life Cycle (SDLC) methodologies.
• Experience working in a global organization is desired.