Director, IT Governance, Risk & Compliance

This is a fully remote position, open to applicants in Iowa, +2 more states.

📋 Description

• Establish the strategic direction and governance framework for IT compliance, encompassing policies, standards, procedures, accountability, and visibility at the executive level.

• Manage the annual IT SOX program and audit processes.

• Supervise business process controls, IT General Controls, automated application controls, and technology-dependent controls.

• Own the IT risk and control framework, which includes Risk and Control Matrices and standards for compliance documentation.

• Drive the resolution of significant control deficiencies and emerging risks.

• Deliver precise evaluations of compliance performance and enterprise risk initiatives to the CIO.

• Foster strategic partnerships with IT executives across affiliated organizations.

• Champion shared compliance objectives, projects, and best practices.

• Guide and develop the IT compliance team.

• Report directly to the VP of Digital Transformation and Information Technology.

⛳️ Requirements

• Bachelor's degree in information systems, computer science, cybersecurity, business, or a related discipline.

• A minimum of 10 years of relevant experience, including managing Risk, Governance, or Compliance within IT.

• Familiarity with auditing frameworks such as ISO27001, ISO27002, ISO17799, along with successful implementation experience.

• Experience with SOX Compliance and PCI-DSS annual cycles.

• Progressive experience in IT audit, IT compliance, technology risk, internal controls, or a related technology discipline.

• Leadership experience in managing multiple annual SOX cycles.

• At least 3 years of experience in people leadership.

• Experience in supporting enterprise platforms, ERP environments, cloud services, system implementations, acquisitions, or technology transformation initiatives.

• Willingness to travel 10–20% of the time.

• Familiarity with SAP or D365 ERPs is advantageous.

• Experience within the MedTech or Life Science industry is a plus.

• CISA, CRISC, CISM, or similar technology risk or security certification is preferred.

🏝️ Benefits

• Eligibility for bonus/incentive pay.

• Paid time off.

• Medical insurance coverage.

• Dental insurance coverage.

• Vision insurance coverage.

• 401(k) retirement plan.

• Flexible arrangements for remote work.

• Option to work from home.