Senior Manager, IT Governance, Risk and Compliance

This is a fully remote position, open to applicants in California, +5 more states.

📋 Description

• Assist the Senior Director of IT Governance, Risk, and Compliance in developing the overall compliance strategy and roadmap.

• Implement and provide daily support for an enterprise Governance, Risk, and Compliance platform, which includes automating risk and control matrices, managing evidence collection workflows, and creating executive reports and dashboards.

• Monitor and deliver key compliance initiatives, including updates on executive status.

• Offer frontline compliance process support and expertise to system leads and business partners.

• Establish, document, and maintain IT compliance requirements.

• Lead efforts to redesign processes in order to identify and eliminate redundant risk management processes and controls.

• Keep inventories of in-scope systems and applications, IT projects, and stakeholders.

• Maintain IT compliance documentation and templates, which include risk and control matrices, process flows, system interface documentation, and remediation plans.

• Review documentation from system leads and control owners for quality, completeness, and compliance alignment.

• Support internal and external audits, including SOX and IT General Controls testing.

• Collect and maintain audit evidence for audit requests and management reviews.

• Identify, track, and remediate control gaps, deficiencies, and action plans.

• Assist with risk assessments, control reviews, and compliance evaluations.

• Monitor control-environment metrics, including reconciliation activities, data analysis, and data hygiene.

• Track adherence of application system owners to access termination processes and perform look-back analyses.

• Execute continuous monitoring processes.

• Prepare management reports on compliance status, risks, remediation efforts, and control effectiveness.

• Document, maintain, and disseminate training materials related to IT compliance, data privacy, and security practices.

• Support initiatives that promote accountability and compliance.

⛳️ Requirements

• A minimum of 5 years of experience in IT compliance, IT audit, risk management, cybersecurity compliance, or a related governance role.

• Hands-on experience in developing and maintaining Risk and Control Matrices, process flows, remediation plans, system inventories, and associated compliance documentation.

• Proven experience in supporting cross-functional stakeholders including Legal, IT, Security, Internal Audit, Finance, and business leaders.

• A Bachelor’s degree in Computer Science, Information Systems, Information Security, Accounting, Finance, or a related discipline is preferred.

• Demonstrated experience in supporting SOX and IT General Controls within a complex public company setting.

• Experience in compliance activities related to mergers and acquisitions.

• Experience in managing third-party assurance processes, including SOC report review and evaluation.

• Familiarity with enterprise control frameworks such as NIST and ISO 27001.

• Knowledge of SAP (S/4) is a plus.

• Strong understanding of SOX, ITGC, and general compliance frameworks.

• Advanced proficiency in Excel, with a strong working knowledge of PowerQuery, SQL, or similar tools preferred.

• Understanding of access management, vendor management, change management, and audit evidence requirements.

• Strong analytical and problem-solving abilities, with exceptional attention to detail.

• Excellent written and verbal communication skills, including the ability to convey technical concepts to non-technical stakeholders.

• Preferred certifications include CISA, CISSP, or CRISC.

🏝️ Benefits

• Competitive base salary along with, where applicable, short- and long-term incentives.

• Opportunities for growth and development.

• Health care benefits.

• Retirement plans.

• Vacation and other paid time off.

• Additional offerings.

• Reasonable accommodations for qualified individuals with disabilities in line with the ADA and relevant state or local laws.