Manager, IT Audit & Compliance

Foundation Building Materials

About The Position

The IT Audit and Compliance Manager is responsible for leading and managing the organization’s IT audit, risk assessment, and compliance programs. This role ensures that IT systems, processes, and controls comply with internal policies, industry standards, and regulatory requirements. The manager will work closely with IT, security, finance, and business teams to strengthen internal controls, mitigate risks, and support strategic initiatives.

Requirements

Bachelor’s degree in Information Systems, Computer Science, Accounting, or related field (Master’s preferred).
7+ years in IT audit, compliance, or risk management roles.
Strong understanding of IT general controls, cybersecurity frameworks, and regulatory requirements.
Proven experience managing audits and compliance projects in large organizations.
Excellent analytical, problem-solving, and organizational skills.
Strong communication skills to engage both technical and non-technical stakeholders.
Ability to manage multiple priorities in a fast-paced environment.

Nice To Haves

CISA, CISM, CISSP, CRISC, or similar highly desirable.

Responsibilities

Plan, execute, and manage IT audits to evaluate the design and effectiveness of internal controls, security measures, and operational processes.
Demonstrated experience managing and testing SOX controls within a publicly traded company, ensuring compliance with financial and IT regulatory requirements.
Conduct risk assessments to identify gaps and vulnerabilities in IT systems and processes.
Conduct 3rd-party risk assessments to identify gaps and vulnerabilities in IT systems and processes with vendors in accordance with NIST.
Develop and maintain audit plans aligned with business priorities and regulatory changes.
Track, monitor, and report remediation efforts from audit findings and ensure timely closure.
Ensure adherence to regulatory requirements (e.g., SOX, NIST, PCI).
Ensure adherence to PCI-DSS 4.0 regulatory requirements, with scope reductions (segmentation, iFrame, and P2PE).
Manage IT compliance frameworks, policies, and procedures to maintain robust governance.
Collaborate with legal, finance, and business stakeholders to ensure compliance across systems and processes.
Stay updated on regulatory changes and assess their impact on IT and business operations.
Lead and manage tax audits, inquiries, and examinations by US federal, state, and Canadian tax authorities.
Mitigate tax risks through proactive monitoring, internal controls, and process improvements.
Coordinate with external auditors and advisors regarding tax-related matters.
Lead and mentor the IT audit and compliance team.
Partner with IT and security teams to promote best practices in information security and data protection.
Serve as the primary liaison with external auditors, regulators, and third-party assessors.
Provide senior management with reports, insights, and recommendations to strengthen compliance posture.
Perform other duties as assigned to support IT and Corporate objectives.