Senior Manager, Corporate IT Security, Compliance

This is a fully remote position, open to applicants in Florida.

📋 Description

• Develop and implement the Corporate IT SOX compliance strategy.

• Create and uphold governance processes throughout the complete IT control lifecycle.

• Perform enterprise-wide IT risk assessments.

• Define and sustain risk-based compliance frameworks.

• Establish escalation protocols and processes for managing issues.

• Evaluate emerging technologies, cloud platforms, AI-driven solutions, and digital transformation projects for security, compliance, and operational risks.

• Supervise IT General Controls, IT Application Controls, automated controls, interface controls, and IT-dependent business process controls.

• Assess the design and operating effectiveness of controls related to identity and access management, change management, SDLC, technology operations, data governance, and cybersecurity.

• Examine financial reporting risks linked to ERP systems, cloud platforms, SaaS applications, integrations, and infrastructure.

• Offer subject matter expertise on SOX 404, ICFR, COSO, COBIT, SOC 1, SOC 2, NIST, ISO 27001, and other governance and security frameworks.

• Assist with vulnerability management, security assessments, and compliance monitoring initiatives.

• Collaborate with teams in Cybersecurity, Infrastructure, Enterprise Applications, Finance, Legal, and Internal Audit.

• Lead the planning, execution, and oversight of IT SOX audits.

• Act as the primary liaison between Corporate IT, external auditors, Internal Audit, and compliance stakeholders.

• Manage audit requests, walkthroughs, evidence collection, testing, issue resolution, and management responses.

• Maintain documentation that is ready for inspection, including control narratives, risk assessments, and evidence repositories.

• Partner with Internal Audit on risk-based audit plans and enterprise governance initiatives.

• Track audit findings, control deficiencies, and remediation efforts.

• Advise executive leadership by converting technology, security, and compliance risks into business recommendations.

• Lead cross-functional teams that are geographically distributed.

• Establish execution standards, quality assurance processes, performance metrics, and governance reporting.

• Create and deliver compliance awareness and training programs.

• Mentor and develop team members.

• Drive continuous improvement of compliance, governance, and audit programs.

• Prepare and present executive-level reports, dashboards, and presentations on compliance, audit findings, risk exposure, remediation, and emerging risks.

• Explain technical and regulatory concepts to both technical and non-technical audiences.

⛳️ Requirements

• Bachelor’s degree in Information Technology, Computer Science, Information Systems, Accounting, Finance, Cybersecurity, or a related field.

• 8–15+ years of progressive experience in Information Technology, IT Audit, IT Risk Management, Cybersecurity, Compliance, or related areas.

• A minimum of 5–7 years of hands-on experience leading SOX compliance, IT audit, risk management, or governance programs within a publicly traded company, Big Four accounting firm, or consulting organization.

• Proven experience in leading enterprise SOX 404, ICFR, SOC 1, and SOC 2 compliance programs in complex, multi-system environments.

• Experience in managing external audit relationships, regulatory examinations, and audit readiness initiatives.

• A strong track record of leading large-scale, multi-workstream compliance and audit programs.

• Experience in leading cross-functional and globally distributed teams.

• Demonstrated success in driving remediation programs, enhancing control environments, and influencing organizational change.

• Knowledge of Governance, Risk & Compliance, Sarbanes-Oxley (SOX), Internal Control over Financial Reporting (ICFR), IT risk management methodologies, SOC reporting frameworks, ITGCs, and ITACs.

• Familiarity with Identity & Access Management (IAM), change management and SDLC controls, data governance, technology operations controls, vulnerability assessment and security monitoring tools, cloud security and compliance controls, and AI governance.

• Experience with ServiceNow and GRC platforms.

• Preferred technology experience with Oracle Cloud, OneStream, Databricks, SAP Business One (SAP B1), Salesforce, Oracle Database, and Active Directory / Microsoft Entra ID.

• Professional certifications preferred, including CISA, CISSP, CPA, CRISC, and CISM.

• Exceptional leadership, collaboration, and stakeholder management skills.

• Strong executive presence with experience presenting audit, compliance, security, and risk topics to senior leadership and Audit Committees.

• Excellent written and verbal communication skills.

• Strong analytical, problem-solving, and decision-making abilities.

• Proven ability to manage multiple priorities and achieve results in a fast-paced environment.

• Demonstrated success in building trusted relationships across business, technology, audit, and executive leadership teams.

🏝️ Benefits

• Medical, vision, dental, and mental health benefits for you and your family.

• Health care concierge services.

• Flexible Spending Account (FSA) or Health Savings Account (HSA).

• Complimentary concert tickets.

• Generous paid time off, including paid holidays, sick leave, and personal days.

• 401(k) program with company match.

• Stock reimbursement program.

• New parent programs, including caregiver leave.

• Support for fertility, adoption, foster care, or surrogacy.

• Career and skill development programs through the School of Live.

• Tuition reimbursement.

• Student loan repayment assistance.

• Volunteer time off.

• Crowdfunding match.