Senior Manager of IT Compliance
About The Position
The Senior Manager of IT Compliance will play a key role in developing, implementing, and maintaining the company’s IT governance, risk, and compliance (IT GRC) framework to support ongoing regulatory requirements. This position will oversee IT General Controls (ITGCs), data privacy compliance, risk assessments, and IT policy development to ensure the company’s technology landscape aligns with SOX, GDPR, and other relevant standards. This role will partner closely with IT, Finance, Legal, Internal Audit, and external advisors to manage IT risks and ensure the company is well-prepared for the control and compliance expectations of a public company.
Requirements
- Bachelor’s degree in Information Systems, Computer Science, Accounting, or related field.
- 7–10 years of experience in IT audit, IT risk management, or IT compliance, preferably in a global, consumer goods, or manufacturing environment.
- Knowledge of IT control frameworks (COBIT, COSO, NIST, ISO 27001) and privacy regulations (GDPR, CCPA, etc.).
- Deep understanding of ITGCs across key domains (access management, change management, computer operations, program development).
- Strong project management and cross-functional collaboration skills.
- Excellent communication and stakeholder management abilities.
- Proactive, detail-oriented, and comfortable operating in a fast-paced, evolving environment.
Nice To Haves
- Experience supporting SOX readiness or IPO transitions is strongly preferred.
- CISA, CISSP, CRISC, CISM, or equivalent certification(s).
Responsibilities
- Design, implement, and maintain effective IT General Controls (ITGCs) in alignment with SOX, COSO, and COBIT frameworks.
- Lead the IT Compliance function—ensuring systems, processes, and documentation meet audit and compliance requirements for a public company.
- Manage the ongoing monitoring and testing of IT controls and remediate deficiencies in collaboration with IT and business process owners.
- Establish and maintain a controls inventory, risk matrix, and documentation repository.
- Partner with Finance and Internal Audit to align IT controls with SOX compliance requirements.
- Support readiness assessments, audit walkthroughs, and control testing.
- Advise leadership on compliance risks and control maturity as part of ongoing governance.
- Conduct IT risk assessments and maintain an IT risk register, ensuring alignment with enterprise risk management (ERM) processes.
- Identify and evaluate emerging technology risks, including cybersecurity, data governance, and third-party vendor risks.
- Develop and track remediation plans to address gaps and ensure timely resolution.
- Partner with Legal, Security, and Data teams to maintain compliance with global data privacy regulations (GDPR, CCPA, etc.).
- Implement data handling policies, data classification standards, and retention requirements across systems.
- Support ongoing privacy audits and incident response processes.
- Develop, implement, and maintain IT compliance policies and standard operating procedures.
- Drive awareness and training initiatives to build a culture of compliance and accountability across the IT organization.
- Prepare and present compliance reports to management, the Audit Committee, and external auditors.
Benefits
- paid time off
- health
- dental
- vision
- life
- disability benefits
- 401(k)
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
