IT Audit & Controls Manager

Quanex•Piney Point Village, TX

2d•$140,000 - $172,000•Onsite

About The Position

Quanex is looking for an IT Audit & Controls Manager to join our team in Houston, TX. This role involves leading IT audit and SOX compliance activities across the organization, partnering with various teams to support audit readiness and compliance, and driving improvements to the company's IT control environment through risk assessments, remediation efforts, and process enhancements. The position offers an opportunity to influence governance, risk management, and compliance initiatives across the business.

Requirements

Bachelor's degree in Information Systems, Information Technology, Accounting, Finance, Cybersecurity, or a related field.
8+ years of progressive experience in IT audit, SOX compliance, IT controls, technology risk, or related disciplines.
Experience evaluating ITGCs, ITACs, automated controls, and access governance processes.
Experience with ERP systems, user access controls, Segregation of Duties (SoD) analysis, and financial reporting environments.
Strong knowledge of SOX compliance requirements and frameworks such as COBIT, COSO, NIST, and ISO 27001.
Strong analytical, organizational, problem-solving, and communication skills.

Nice To Haves

Experience with GRC tools, identity governance solutions, data analytics, and audit management platforms preferred.

Responsibilities

Plan, coordinate, and execute IT audit and SOX compliance activities, including walkthroughs, testing, deficiency assessments, and remediation validation.
Evaluate IT General Controls (ITGCs), IT Automated Controls (ITACs), system-generated reports, and ERP configurations supporting financial reporting.
Manage audit timelines, testing schedules, evidence requests, remediation tracking, and stakeholder communications.
Conduct IT risk assessments, identify control gaps, and monitor corrective actions through completion.
Develop policies, procedures, reporting, and training materials that support audit readiness and continuous improvement.