DIRECTOR OF IT CONTROLS (REMOTE)

Compass Group•REMOTE, NC

2d•Remote

About The Position

The Director, IT Controls is responsible for leading the strategy, design, and execution of the Company’s IT controls environment across a global, multi-division organization. Reporting to the SVP of Governance, this role provides enterprise leadership over IT controls, compliance, and risk alignment, ensuring consistency, efficiency, and regulatory adherence across diverse business operations. This leader will lead a high-performing team and drive the evolution of the control environment from fragmented and operational to standardized, scalable, and risk-aligned. The role has broad enterprise impact, supporting financial reporting integrity, data protection, and overall compliance posture across global operations.

Requirements

10+ years of experience in IT controls testing, compliance, risk management, or cybersecurity governance
Experience leading teams and developing talent in a global environment
Strong knowledge of regulatory frameworks such as SOX, GDPR, and familiarity with industry standards (e.g., NIST, ISO 27001, COBIT)
Demonstrated ability to lead enterprise-wide initiatives and influence senior stakeholders
Experience partnering with IT, Cybersecurity, Legal, and Internal Audit functions
Strong focus on practical implementation, efficiency, and scalable solutions

Responsibilities

Lead, develop, and mentor a team responsible for IT controls and compliance, including the design, implementation and testing of controls.
Define and execute the enterprise IT controls strategy to drive alignment between compliance, cybersecurity, and risk management objectives
Establish and maintain a consistent, scalable IT controls framework, ensuring standardized execution of key controls (e.g., access management, provisioning, change management, monitoring)
Drive standardization across business units, ensuring consistent execution of key controls (e.g., access reviews) across varied operating environments
Lead initiatives to consolidate and rationalize controls, reducing redundancy while maintaining regulatory compliance
Ensure alignment with current and future regulatory obligations, including SOX, GDPR, and applicable international requirements, with awareness of frameworks such as NIST, ISO, and COBIT
Provide oversight of IT policies, standards, and procedures, ensuring practical implementation across the organization
Partner with Cybersecurity leadership and CISO teams to integrate controls into broader security and risk management programs
Oversee third-party compliance expectations
Serve as a key liaison to Internal Audit and Legal, supporting audits, regulatory inquiries, and remediation activities
Establish and report on control effectiveness metrics and key risk indicators to senior leadership
Drive continuous improvement through automation, data-driven monitoring, and process optimization
Influence and guide cross-functional stakeholders to ensure sustainable control execution across a complex, global organization