Senior Manager, Corporate IT Security, Compliance Audit

This is a fully remote position, open to applicants in Texas.

📋 Description

• Formulate and implement the Corporate IT SOX compliance strategy.

• Direct annual and quarterly IT SOX planning activities, encompassing risk assessments, scoping, control evaluations, testing coordination, and audit execution.

• Create and uphold governance processes that support the complete IT control lifecycle.

• Perform enterprise-wide IT risk assessments.

• Define and manage risk-based compliance frameworks.

• Set up escalation protocols and issue management processes.

• Evaluate emerging technologies concerning security, compliance, and operational risks.

• Supervise the design, implementation, and monitoring of IT General Controls.

• Assess control design and operational effectiveness.

• Offer subject matter expertise on SOX 404, ICFR, COSO, COBIT, SOC 1, SOC 2, NIST, ISO 27001.

• Assist in vulnerability management, security assessments, and compliance monitoring initiatives.

• Lead the planning, execution, and oversight of IT SOX audits.

• Act as the primary liaison between Corporate IT and external auditors.

• Prepare and deliver executive-level reports, dashboards, and presentations on compliance status, audit findings, risk exposure, remediation progress, and emerging risks.

⛳️ Requirements

• Bachelor’s degree in Information Technology, Computer Science, Information Systems, Accounting, Finance, Cybersecurity, or a related field.

• Master’s degree is preferred.

• 8–15+ years of progressive experience in Information Technology, IT Audit, IT Risk Management, Cybersecurity, Compliance, or related fields.

• At least 5–7 years of direct experience leading SOX compliance, IT audit, risk management, or governance programs within a publicly traded company, Big Four accounting firm, or consulting organization.

• Proven experience in leading enterprise SOX 404, ICFR, SOC 1, and SOC 2 compliance programs in complex, multi-system environments.

• Professional certifications are preferred, including: Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), Certified Public Accountant (CPA), Certified in Risk and Information Systems Control (CRISC), Certified Information Security Manager (CISM).

• Experience managing external audit relationships, regulatory examinations, and audit readiness initiatives.

• Demonstrated success in leading large-scale, multi-workstream compliance and audit programs.

• Experience leading cross-functional and globally distributed teams.

• Proven ability to drive remediation programs, enhance control environments, and influence organizational change.

🏝️ Benefits

• Medical, vision, dental, and mental health benefits.

• Complimentary concert tickets.

• Generous paid time off, including paid holidays, sick leave, and personal days.

• 401(k) plan with company matching.

• New parent programs, including caregiver leave, as well as fertility, adoption, foster, or surrogacy support.

• Career and skill development programs with the School of Live, tuition reimbursement, and student loan repayment.

• Volunteer time off and crowdfunding match.