IS-IT Compliance and Controls Manager

Mastercraft Boat Company LLC•Vonore, TN

About The Position

The IT Controls & Compliance Manager is responsible for overseeing the execution, monitoring, and continuous improvement of IT governance, risk, and compliance programs across multiple manufacturing facilities and business units. This role ensures that IT processes and controls support public company obligations, regulatory requirements, cybersecurity standards, and internal policies. The position partners closely with Information Technology, Finance, Internal Audit, Operations, Information Security, and external auditors to maintain an effective control environment. The Manager serves as a day-to-day owner of IT control execution, compliance monitoring, audit coordination, change governance, and process improvement activities.

Requirements

Bachelor's degree in Information Systems, Computer Science, Accounting, Business Administration, Risk Management, or related field.
5-8 years of experience in IT controls, compliance, audit, governance, cybersecurity, or risk management.
Experience supporting public company compliance requirements, including SOX-related IT controls.
Experience working within manufacturing, multi-site operations, or distributed business environments.
Experience with audit coordination, control testing, evidence collection, and remediation tracking.
Technical Competencies: IT General Controls, Cybersecurity Controls, Risk Assessments, Asset Management, Vendor governance.
Leadership Competencies: Follow-through and accountability, Organizational effectiveness.
Business Competencies: Manufacturing operations awareness, SOX Compliance, Process improvement, Financial controls understanding, Change Management, Project management, Regulatory compliance, Audit Management, Communication and presentation skills, Business process discipline, Policy Governance, Operational risk awareness.

Nice To Haves

Previous supervisory, team leadership, or cross-functional program leadership experience preferred.
CISA
CRISC
CISSP
CIA
ITIL Foundation
PMP preferred

Responsibilities

Maintain and enhance the IT controls framework supporting organizational compliance requirements.
Document, review, and update IT policies, standards, procedures, and control documentation.
Monitor effectiveness of IT General Controls and key technology-related business controls.
Coordinate periodic control testing and remediation activities.
Track and report control deficiencies, corrective action plans, and control improvement opportunities.
Support compliance programs related to SOX, cybersecurity governance, data protection, and corporate policies.
Ensure compliance activities are performed consistently across business units and manufacturing locations.
Coordinate evidence collection and retention required for internal and external audits.
Maintain compliance records, documentation repositories, and audit support materials.
Serve as a primary IT liaison for internal and external audits.
Coordinate audit requests, interviews, testing schedules, walkthroughs, and evidence collection.
Track audit findings and ensure corrective actions are completed on schedule.
Assist management with audit response preparation and remediation planning.
Administer enterprise change management processes and governance standards.
Coordinate Change Advisory Board meetings and support change review processes.
Review change records to ensure proper approvals, testing, documentation, and risk assessments are completed.
Monitor change-related performance metrics, success rates, emergency changes, and compliance trends.
Support governance of IT asset management and configuration management processes.
Ensure hardware, software, endpoint, server, and infrastructure inventories remain accurate and compliant.
Monitor software licensing compliance and asset lifecycle controls.
Validate compliance with asset disposition, refresh, and inventory management procedures.
Participate in periodic IT risk assessments across infrastructure, applications, manufacturing systems, and business processes.
Identify control gaps, process weaknesses, and compliance risks.
Develop and track remediation plans in partnership with business and technology teams.
Assist with business continuity and disaster recovery governance activities.
Monitor compliance with incident and event management processes.
Ensure root cause analysis and corrective actions are documented and completed.
Track operational and compliance metrics related to major incidents and service disruptions.
Identify process improvement opportunities based on incident trends and recurring issues.
Develop compliance dashboards, KPI reporting, and management updates.
Present compliance metrics, audit status, risk items, and remediation progress to IT leadership.
Recommend process improvements to strengthen governance, operational maturity, and audit readiness.
Support automation initiatives that improve control effectiveness, evidence management, and reporting.