IT Compliance Manager- Hybrid- Genesco

Genesco • Nashville, TN

1d • Hybrid

About The Position

The IT Compliance Manager works within IT and Delivery Governance and partners with the CISPO to manage key aspects of Genesco’s IT compliance program. The role establishes and sustains a consistent, year-round approach to IT compliance and control governance across the company, helping IT teams understand their responsibilities and incorporate compliance into technology changes and daily operations.

The manager coordinates, guides, challenges, and escalates SOX and IT General Controls (ITGC) activities. The role supports compliance testing, documentation, control effectiveness reviews, risk tracking, remediation, and governance across internal and outsourced technology processes. It also facilitates Genesco’s IT Change Advisory Program for US businesses and remotely for the UK, including Change Advisory Board and steering committee activities, as well as ServiceNow stakeholder and Architectural Review Board engagement.

Requirements

• 3–5 years of experience in SOX, ITGCs, IT compliance, technology controls, IT audit, or a related discipline.
• Experience in a publicly traded organization or an environment operating under public-company-level SOX requirements.
• Strong understanding of ITGCs, including access management, change management, technology operations, and control evidence.
• Experience embedding, creating, maintaining, and improving compliance, control, process, or governance documentation.
• Experience working with Security, technology teams, leadership, auditors, control owners, and third-party service providers.
• Ability to interpret compliance and control requirements and translate them into practical expectations for technology teams.
• Strong communication, documentation, facilitation, organization, influence, and stakeholder-management skills.
• Ability to work independently, drive follow-through, constructively challenge stakeholders, and escalate risks when appropriate.
• Strong relationship-building skills and the ability to balance compliance requirements with a collaborative, solutions-oriented approach.

Nice To Haves

• Experience working effectively with IT teams and IT Change Advisory Boards.
• Experience with ServiceNow, Smartsheet, Jira, Confluence, or Excel.
• Experience with outsourced technology providers or cross-regional IT organizations.

Responsibilities

• Manage recurring SOX and ITGC compliance activities with the CISPO, including control requirements, ownership, evidence expectations, and execution.
• Help IT teams identify control gaps, risks, and changes that affect SOX or ITGC requirements, and ensure review, follow-through, and escalation.
• Coach and support IT teams through SOX and ITGC testing, including control-owner engagement, evidence coordination, follow-up, and remediation support with Leadership, the CISPO, and Internal Audit.
• Establish and support SOX/ITGC review checkpoints for projects, enhancements, integrations, vendor transitions, access changes, and support model changes affecting controls.
• Maintain and develop IT compliance and governance documentation with internal and offshore suppliers, partnering with control and process owners to keep it accurate and current.
• Partner with operational teams and control owners to assess control effectiveness, confirm controls provide value, and identify improvements.
• Develop and maintain an IT compliance risk register for long-range planning, highlighting key risks and guiding investment priorities.
• Ensure vendor-supported and outsourced processes maintain clear control ownership, accountability, documentation, and auditability.
• Facilitate Change Advisory Board activities for US businesses and remotely for the UK, including meeting coordination, agenda preparation, action tracking, follow-up, and escalation.
• Facilitate Change Advisory Program steering committee activities and support ServiceNow stakeholder and Architectural Review Board (ARB) engagement.
• Review documentation and other sources to identify technology changes with potential SOX or ITGC implications, ensuring stakeholder involvement, visibility, documentation, and follow-through.
• Provide oversight and constructive challenge, drive governance activities to completion, and escalate unresolved risks while maintaining accountability with control owners, process owners, change owners, and IT leaders.
• Build strong relationships across Security, IT leadership, technology teams, vendors, and other stakeholders to drive practical, sustainable compliance solutions.
• Embed SOX and ITGC compliance into daily IT operations so control responsibilities are understood and executed consistently year-round, not only during audit cycles.

Benefits

• Day-one medical, dental, and vision coverage.
• Day-one 401(k) eligibility with company match and rollover options for existing retirement accounts.
• 40% employee discount across all Genesco-owned brands and retail concepts.
• Paid time off.
• Nine paid holidays plus one floating holiday.
• Life and disability insurance.
• Flexible spending and health savings account options.
• Employee Assistance Program (EAP).

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed