Information Technology Compliance Manager

Varsity Brands

9h•Remote

About The Position

A successful Information Technology Compliance Manager will be a detail-oriented, self-driven and forward-thinking individual. They will be responsible for ensuring that our organization adheres to all relevant Information Technology (IT) Governance, Risk, and Compliance (GRC) standards, with a specific focus on Sarbanes-Oxley Act (SOX) requirements for public companies. This role will involve developing, implementing, and managing IT compliance programs and processes to mitigate risks and ensure the integrity and security of our IT systems and data.

Requirements

Strong understanding of IT governance frameworks (e.g., ITIL)
In-depth knowledge of regulatory requirements (e.g., SOX, CCPA, GDPR, PCI-DSS)
Strong understanding of regulatory requirements and standards relevant to access controls, including SOX (Sarbanes-Oxley), CCPA, GDPR, PCI-DSS and industry-specific regulations.
Hands-on experience with access control tools and systems, such as SAP GRC (Governance, Risk, and Compliance) or similar platforms.
Experience developing and implementing IT compliance programs, policies, and controls.
Proven ability to conduct IT compliance risk assessments, audits, and gap analyses.
Deep understanding of project and program management principles, methods, and techniques.
Familiarity with IT systems and technologies, including network security, cloud computing, and enterprise applications.
Commitment to maintaining confidentiality and integrity in handling sensitive information and compliance matters.
Ability to work independently and manage multiple projects simultaneously in a fast-paced environment.
Excellent communication and interpersonal skills, with the ability to effectively collaborate with diverse stakeholders and influence change.
Strong analytical and problem-solving skills, with keen attention to detail and the ability to interpret complex data and identify trends, anomalies, and compliance risks.
Bachelor's degree in information technology, computer science, or a related field.
Minimum of 5+ years of experience in IT compliance, governance, risk management, or related fields, preferably in a public company environment.

Nice To Haves

Advanced degree or relevant certifications (e.g., CISA, CISSP, CRISC) preferred.

Responsibilities

Develop and maintain IT compliance policies, procedures, and controls in alignment with industry best practices, regulatory requirements, and company objectives.
Conduct regular assessments and audits of IT systems, processes, and controls to identify compliance gaps and risks.
Monitor and analyze user access controls within critical applications, such as SAP, to ensure compliance with regulatory requirements and internal policies.
Conduct regular audits and reviews of user access rights, permissions, and segregation of duties to identify and remediate any violations or discrepancies.
Collaborate with cross-functional teams, including IT, finance, legal, and internal audit, to ensure alignment of IT compliance initiatives with organizational goals.
Provide guidance and support to IT teams in implementing and maintaining compliance controls, including access controls, change management, and data protection measures.
Manage the IT compliance risk register and prioritize remediation efforts based on the level of risk exposure and impact.
Coordinate and support internal and external audits related to IT compliance, including SOX audits, by providing documentation, evidence, and guidance to auditors.
Monitor regulatory changes and industry trends related to IT compliance and communicate updates and implications to relevant stakeholders.
Develop and deliver IT compliance training programs to raise awareness and build competency among employees regarding compliance requirements and responsibilities.
Serve as a subject matter expert on IT compliance matters, providing advice, recommendations, and support to senior management and business units.
Continuously evaluate and improve the effectiveness and efficiency of IT compliance processes and controls through regular reviews and assessments.
Perform other duties as assigned.