IT Compliance Manager
Astronics•East Aurora, NY
•$122,000 - $147,000•Hybrid
About The Position
The IT Compliance Manager ensures IT systems, processes, and controls comply with SOX requirements, CMMC, applicable laws, industry standards, and company policies across the global Astronics organization. This role leads IT SOX audit activities and CMMC readiness efforts, working closely with internal audit, external auditors, control owners, and business stakeholders to identify compliance risks, implement controls, and drive remediation.
Requirements
- 5+ years of experience leading IT audit or compliance functions, with significant hands-on SOX ITGC experience
- Expertise in managing IT SOX audits end-to-end, including coordination with external auditors
- Deep familiarity with ITGC domains: access management, change management, computer operations, and logical security
- Exposure to CMMC, DFARS, or NIST 800-171 compliance programs
- Strong interpersonal, analytical, and written communication skills; ability to translate complex compliance and technical requirements for finance, operations, and executive audiences
- Detail-oriented with the ability to manage competing priorities and tight audit deadlines
Nice To Haves
- CPA, CISA, CISSP, or equivalent certification
- Experience with IT compliance frameworks such as COBIT or NIST
- Experience with GRC tools (e.g., CrossComply) for control tracking and audit evidence management
- Experience with formal assessment preparation
- Familiarity with change monitoring tools and compliance training platforms
- Knowledge of additional regulatory requirements relevant to aerospace and defense (e.g., ITAR, GDPR)
Responsibilities
- Own the IT SOX compliance program, including ITGC scoping, control design, testing coordination, and remediation tracking across all in-scope systems and processes
- Act as primary point of contact for coordination of IT SOX audit activities with internal and external auditors, managing evidence requests, and facilitating walkthroughs and interim ITGC change testing
- Manage CMMC readiness efforts including POAM remediation, scoping, evidence gathering, and C3PAO coordination
- Develop, implement, and maintain comprehensive IT compliance programs to ensure adherence to relevant regulations, laws, and industry standards including SOX and CMMC/DFARS
- Lead a team of IT compliance analysts, supporting their independent ownership of individual control areas; providing mentorship through ongoing professional development
- Manage user access review (UAR) cycles, including scheduling, evidence coordination, remediation tracking, and follow-up with control owners on high-priority items
- Monitor IT change activity through tools such as Tripwire, coordinating scope decisions and managing reconciliation queues
- Draft and route IT policies and procedures for approval, engaging key stakeholders as needed
- Create IT compliance training programs, monitor delivery and ensure employee completion
- Review and approve exception and control reviews, ensuring remediation plans adequately mitigate identified risks
- Serve as subject matter expert on IT compliance matters, fielding questions from stakeholders and routing inquiries to appropriate compliance analysts based on expertise
- Coordinate with the Director of IT, Internal Audit, Finance, and other departments to ensure effective communication on IT compliance initiatives, including project charter reviews and new system implementations
- Proactively track IT compliance trends and anticipated regulatory modifications to support organizational compliance
Benefits
- Competitive base salary with quarterly bonus opportunities
- Hybrid role, work two days onsite in our East Aurora, NY office
- 9/80 schedule with every other Friday off
- 401(k) with company contribution and discounted Employee Stock Purchase Plan
- Comprehensive health, dental, vision, and life benefits
- Week-long Christmas shutdown and paid holidays
- Starting with 120 hours of paid time off annually
- 12 paid holidays per year
- Benefits start the first of the month after hire
- Quarterly bonus tied to company profitability
- 401(k) with 3% company contribution
- Employee Stock Purchase Plan
- Paid holidays (including a full Christmas week shutdown)
- Comprehensive health/vision/dental coverage
- Continuing education support
- Certifications
- Exposure to data governance on a global scale
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
Upload and Match Resume
What This Job Offers
Job Type
Full-time
Career Level
Manager
Education Level
No Education Listed
