Senior IT & Controls Lead

Ionic Digital Inc.•Metro D.C., DC

34d•Remote

About The Position

Ionic Digital is looking for a Senior IT & Controls Lead to help build and mature the security, IT governance, and control environment that supports our growth as a public company. This role is ideal for a hands-on governance and controls professional who can execute IT general controls, strengthen access governance, improve security standards, and help keep the Company's technology environment audit-ready.

Requirements

5-8 years of progressive IT experience, including at least 2 years in a controls, security, governance, or compliance-adjacent role.
Working knowledge of SOX ITGC domains, including logical access, change management, operations, and backup/recovery.
Experience with access governance, identity management, Azure AD / Entra ID, and security policy frameworks.
Experience maintaining control documentation, evidence, audit support materials, or comparable compliance records.
Ability to work effectively with IT Operations, business teams, external consultants, and auditors.
Strong written and verbal communication skills.
Strong organizational skills, attention to detail, and ability to manage multiple priorities in a fast-paced environment.

Nice To Haves

Public company or SOX-controlled environment experience.
CISA, CRISC, CCSP, Security+, ITIL, or similar certification.
ISO 27001, SOC 2, or comparable security and compliance framework experience.
Experience with ERP access controls, segregation of duties, or NetSuite security administration.
Experience working with external auditors and coordinating ITGC testing activities.
Experience with SaaS governance, vendor risk management, technology procurement standards, or security reviews.
Experience in digital assets, bitcoin mining, data center operations, energy infrastructure, or high-performance computing environments.

Responsibilities

Own and maintain security policies, access standards, and IT governance practices across critical company systems.
Set security baselines and compliance requirements for Microsoft 365, endpoints, cloud services, SaaS platforms, and other technology tools.
Support vendor and SaaS governance through security reviews, risk assessments, contract standards, and technology intake processes.
Execute IT general controls in alignment with SOX requirements, including logical access, change management, operations, and backup/recovery controls.
Maintain audit-ready documentation, evidence repositories, control matrices, and recurring control support materials.
Coordinate ITGC testing, identify gaps, help drive remediation, and support audit requests from external auditors and advisors.
Lead access governance activities, including documented periodic access reviews for critical systems.
Define and enforce least-privilege and segregation of duties standards, particularly for financial systems and other high-risk applications.
Set standards for MFA, SSO, conditional access, and privileged access management in partnership with IT Operations.
Support security incident response, access anomaly review, and recurring control exception monitoring.
Own IT change management standards, including intake, approval, testing, logging, documentation, and evidence requirements.
Partner closely with IT Operations, Finance Systems, external consultants, and business stakeholders to translate governance requirements into practical processes.
Help expand IT governance practices as the Company grows across digital infrastructure, high-performance computing, and operational sites.