Manager, Internal Controls Compliance

UVA Health•Charlottesville, VA

2d•$120,000 - $190,038•Onsite

About The Position

The Internal Controls Compliance Manager is responsible for designing, implementing, and monitoring a robust internal control environment aligned with the COSO Framework and state regulatory requirements. This role ensures compliance with ARMICS standards, strengthens risk management practices, and supports audit readiness across financial and operational processes.

Requirements

Proven ability to manage cross-functional initiatives and influence stakeholders.
Direct experience with ARMICS compliance and filings, preferably within a Virginia public institution such as the University of Virginia.
Experience working with ERP systems (e.g., Workday, PeopleSoft) and understanding of IT general controls (ITGCs).
Deep understanding of risk and control concepts with a pragmatic approach
Strong analytical and problem-solving skills
Excellent communication and stakeholder management
High attention to detail with the ability to see the big picture
Ability to operate effectively in a fast-paced, deadline-driven environment
Bachelor’s degree in Accounting, Finance, or a related field required.
Minimum of 10 years of progressive experience in accounting/ internal controls, audit and compliance with at least 5 years in a leadership role managing accounting operations required.
Strong working knowledge of the COSO Framework and its practical application.

Nice To Haves

Master’s degree strongly preferred.
CPA, CIA, or CISA preferred

Responsibilities

Lead the design and maintenance of internal controls in alignment with the COSO Framework (control environment, risk assessment, control activities, information & communication, monitoring).
Develop and maintain process documentation, including narratives, flowcharts, and risk-control matrices (RCMs).
Partner with finance, operations, and IT to embed controls into key business processes.
Coordinate annual ARMICS submissions in accordance with Commonwealth of Virginia requirements.
Perform risk assessments and support certification of internal controls over financial and operational processes.
Ensure timely and accurate documentation supporting agency head certifications.
Conduct enterprise-level and process-level risk assessments to identify control gaps and improvement opportunities.
Monitor remediation of identified deficiencies and track progress to closure.
Establish key control indicators (KCIs) and reporting dashboards for leadership.
Develop and deliver training programs on internal controls, compliance requirements, and best practices.
Drive continuous improvement initiatives to enhance efficiency and effectiveness of control processes.
Promote a culture of accountability and risk awareness across the organization.