Manager, IT Risk and Compliance

Equity Trust Company • Dallas, TX

6d • Hybrid

About The Position

The Manager – IT Risk and Compliance reports to the Executive Director - IT Risk & Compliance, and ensures that all IT operations, processes, and systems are compliant with industry standards and legal regulations. Utilizes a strong background in IT audit, risk, and compliance, with a focus on SOX compliance and operational information security audits. Conducts risk assessments, manages access to applications, and develops internal controls in coordination with the Executive Director, IT Risk & Compliance. May lead or mentor IT professionals as the team structure evolves. Leverages a deep understanding of IT governance frameworks, data privacy laws, network security architecture, and business continuity planning.

Requirements

• Over 6 years of experience in IT audit, risk, and compliance.
• Bachelor's degree in Information Technology, Computer Science, or a related field required.
• Proven experience in leading IT SOX compliance and operational information security audits.
• Strong understanding of industry standards and legal regulations related to IT and data compliance.
• Excellent problem-solving skills and the ability to work under pressure.
• Strong communication skills and the ability to work effectively with both technical and non-technical staff.
• Experience with cloud-based data compliance, including familiarity with platforms like Microsoft Azure.
• Knowledge of IT governance frameworks such as COBIT, ITIL, and ISO 27001.
• Proficiency in using GRC (Governance, Risk, and Compliance) tools for risk assessments and compliance management.
• Experience with data privacy laws such as GDPR, CCPA, and HIPAA.
• Understanding of network security architecture and security system design.
• Experience with incident response planning and security breach drills.
• Proficiency in conducting internal and external audits for IT compliance.
• Experience with business continuity planning and disaster recovery strategies.

Nice To Haves

• Advanced degrees or certifications in IT compliance or risk management are preferred.
• Relevant certifications such as CISA, CRISC, CDPSE, and CISM from ISACA.
• SIE Certification Series 99 Series 7 preferred
• If you do not already have a Securities license relevant to your role at Innovayte, you may be required to take and pass the Securities Industries Essentials exam provided by FINRA.
• In addition, based on your role responsibilities, you may also be required to pass additional Securities Industry exams to allow you to operate in your role and be compliant with FINRA and the SEC requirements.
• These licenses, when required, need to be obtained within certain specific time frames, typically 120 calendar days.

Responsibilities

• Ensure that all IT operations, processes, and systems comply with industry standards and legal regulations, including a focus on SOX compliance and operational information security audits.
• Conduct comprehensive risk assessments and manage the mitigation of identified risks to maintain the integrity and security of company IT infrastructure.
• Oversee access to all applications, ensuring that only authorized individuals have access to relevant data and systems.
• Develop and maintain robust internal controls, in coordination with the Executive Director, to safeguard the company’s digital assets and data.
• Develop and maintain IT policies and procedures, subject to Executive Director review and approval, to support the company’s operations and regulatory compliance.
• Conduct regular reviews of system access and IT controls to identify potential weaknesses and areas for improvement.
• May provide guidance and mentorship to IT risk and compliance staff as team responsibilities expand.
• Monitor regulatory changes and developments to ensure company practices remain in compliance, escalating findings and recommendations to the Executive Director, IT Risk & Compliance.
• Evaluate and recommend new technologies to improve compliance and risk management processes.
• Support and help implement programs/initiatives to enhance compliance awareness, contributing to continuous improvement of the Company’s Compliance and Risk Management programs under the direction of the Executive Director.
• Travel to various locations, both within our organization and externally, may be required depending on your role and responsibilities.
• Follows assigned work schedule with regular and predictable attendance.
• Performs other duties as assigned.

Benefits

• We believe that our core values—rooted in respect, empowerment, innovation, service, integrity, trust, and accountability are essential to achieving our mission.

What This Job Offers

• Job Type: Full-time
• Career Level: Manager