Manager, IT Governance, Risk, and Compliance

This is a fully remote position, open to applicants in Connecticut, +3 more states.

📋 Description

• Assist the Senior Director of IT Governance, Risk and Compliance in crafting the overarching compliance strategy and roadmap.

• Implement and provide daily support for an enterprise Governance, Risk and Compliance platform.

• Automate risk and control matrices, workflows for evidence collection, executive reporting, and dashboards.

• Monitor and deliver key compliance initiatives while providing executive status updates.

• Offer frontline compliance process support and subject matter expertise to system leads and business partners.

• Establish, document, and uphold IT compliance requirements.

• Lead efforts to redesign processes aimed at eliminating redundant risk management practices and controls.

• Maintain inventories of in-scope systems, applications, IT projects, and stakeholders.

• Keep IT compliance documentation and templates current, including Risk and Control Matrices, process flows, system interface documentation, and remediation plans.

• Review documentation from system leads and control owners for quality, completeness, and compliance alignment.

• Assist with internal and external audits, including SOX and IT General Controls testing.

• Collect and preserve audit evidence for audit requests and management reviews.

• Track and address control gaps, deficiencies, and action plans.

• Support risk assessments, control reviews, and compliance evaluations.

• Monitor compliance with internal policies and control-environment metrics.

• Track application system owner adherence to access termination processes and conduct retrospective analyses.

• Execute continuous monitoring processes.

• Prepare management reports on compliance status, risks, remediation efforts, and control effectiveness.

• Document, maintain, and disseminate IT compliance, data privacy, and security training materials.

• Promote awareness initiatives that encourage accountability and compliance.

⛳️ Requirements

• Over 5 years of experience in IT compliance, IT audit, risk management, cybersecurity compliance, or a related governance role.

• Practical experience in developing and maintaining Risk and Control Matrices, process flows, remediation plans, system inventories, and related compliance documentation.

• Proven experience supporting cross-functional stakeholders such as Legal, IT, Security, Internal Audit, Finance, and business leads.

• Experience with SOX and IT General Controls in a complex public company setting.

• Familiarity with compliance activities related to mergers and acquisitions.

• Experience managing third-party assurance processes, including the review and evaluation of SOC reports.

• Knowledge of enterprise control frameworks such as NIST and ISO 27001.

• Strong understanding of SOX, ITGC, and general compliance frameworks.

• Advanced proficiency in Excel.

• Strong working knowledge of PowerQuery, SQL, or similar tools is preferred.

• Understanding of access management, vendor management, change management, and audit evidence requirements.

• Exceptional analytical and problem-solving capabilities with a keen attention to detail.

• Excellent written and verbal communication skills, with the ability to convey technical concepts to non-technical stakeholders.

• Preferred certifications include CISA, CISSP, or CRISC.

• Bachelor’s degree in Computer Science, Information Systems, Information Security, Accounting, Finance, or a related field is preferred.

• Knowledge of SAP S/4 is an advantage.

🏝️ Benefits

• Competitive base salary along with applicable short- and long-term incentives.

• Opportunities for growth and professional development.

• Comprehensive health care options.

• Retirement plan.

• Paid vacation and other time off.

• Additional offerings available.

• Reasonable accommodations provided for qualified individuals with disabilities in accordance with the ADA and relevant state or local laws.