IT Compliance Manager- Hybrid- Genesco

Genesco • Nashville, TN

2d • Hybrid

About The Position

The IT Compliance Manager will establish and sustain a consistent, year-round approach to IT compliance and control governance across Genesco. Within IT and Delivery Governance, this role partners with the CISPO to manage key aspects of the IT compliance program and ensure consistent execution across IT teams. The role coordinates, guides, challenges, and escalates SOX and IT General Controls (ITGC) activities, helping IT teams understand responsibilities, identify control impacts before they occur, and incorporate compliance into technology changes and daily operations. Additionally, the IT Compliance Manager facilitates Genesco’s IT Change Advisory Program across the US and UK, strengthening governance, documentation, and consistency across IT.

Requirements

• 3–5 years of experience in SOX, ITGCs, IT compliance, technology controls, IT audit, or a related discipline
• Experience in a publicly traded organization or environment operating under public-company-level SOX requirements
• Strong understanding of ITGCs, including access management, change management, technology operations, and control evidence
• Experience embedding, creating, maintaining, and improving compliance, control, process, or governance documentation
• Experience working with Security, technology teams, leadership, auditors, control owners, and third-party service providers
• Ability to interpret compliance and control requirements and translate them into practical expectations for technology teams
• Strong communication, documentation, facilitation, organization, influence, and stakeholder-management skills
• Ability to work independently, drive follow-through, constructively challenge stakeholders, and escalate risks when appropriate
• Strong relationship-building skills and the ability to balance compliance requirements with a collaborative, solutions-oriented approach

Nice To Haves

• Experience working effectively with IT teams and IT Change Advisory Boards, ServiceNow, Smartsheet, Jira, Confluence, Excel, outsourced technology providers, or cross-regional IT organizations

Responsibilities

• Manage recurring SOX and ITGC compliance activities with the CISPO, including control requirements, ownership, evidence expectations, and execution
• Help IT teams identify control gaps, risks, and changes affecting SOX or ITGC requirements, ensuring review, follow-through, and escalation
• Coach and support IT teams through SOX and ITGC testing, including control-owner engagement, evidence coordination, follow-up, and remediation support with Leadership, the CISPO, and Internal Audit
• Establish and support SOX/ITGC review checkpoints for projects, enhancements, integrations, vendor transitions, access changes, and support model changes affecting controls
• Maintain and develop IT compliance and governance documentation with internal and offshore suppliers, including control and process documentation, procedures, ownership information, evidence guidance, governance standards, and related materials; partner with control and process owners to keep documentation accurate and current
• Partner with operational teams and control owners to assess control effectiveness, confirm controls provide value, and identify improvements
• Develop and maintain an IT compliance risk register for long-range planning, highlighting key risks and guiding investment priorities
• Ensure vendor-supported and outsourced processes maintain clear control ownership, accountability, documentation, and auditability
• Facilitate Change Advisory Board (CAB) activities for US businesses and remotely for the UK, including meeting coordination, agenda preparation, action tracking, follow-up, and escalation
• Facilitate Change Advisory Program steering committee activities and support ServiceNow stakeholder and Architectural Review Board (ARB) engagement
• Review documentation and other sources to identify technology changes with potential SOX or ITGC implications, ensuring stakeholder involvement, visibility, documentation, and follow-through
• Provide oversight and constructive challenge, drive governance activities to completion, and escalate unresolved risks while maintaining accountability with control owners, process owners, change owners, and IT leaders
• Build strong relationships across Security, IT leadership, technology teams, vendors, and other stakeholders to drive practical, sustainable compliance solutions
• Embed SOX and ITGC compliance into daily IT operations so control responsibilities are understood and executed consistently year-round, not only during audit cycles

Benefits

• Day-one medical, dental, and vision coverage
• Day-one 401(k) eligibility with company match and rollover options for existing retirement accounts
• 40% employee discount across all Genesco-owned brands and retail concepts
• Paid time off
• Nine paid holidays plus one floating holiday
• Life and disability insurance
• Flexible spending and health savings account options
• Employee Assistance Program (EAP)

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed