IT SOX & Governance Director

Description

• Oversee the implementation of IT security and GRC policies, procedures, and standards
• Promote a culture of compliance, accountability, and risk awareness within the IT organization
• Oversee IT risk assessments, including identification, scoring, monitoring, and mitigation of technology risks
• Collaborate with teams across the organization to strengthen cybersecurity awareness and practices
• Present program updates, control status, and risks to senior leadership and audit committees
• Provide expert advice to senior leadership on GRC matters, including risk posture, strategic roadmaps, and necessary courses of action
• Develop, implement, and maintain IT governance frameworks aligned with COBIT, ITIL, NIST, and industry best practices
• Optimize processes through automation, tools, and continuous improvement practices
• Drive timely remediation of control gaps and deficiencies, partnering with IT and business teams
• Ensure the organization complies with industry-specific security and data protection regulations
• Develop and maintain KPIs, dashboards, and reporting mechanisms to track compliance and control performance
• Lead and mentor a team of governance, compliance, and audit professionals
• Partner with Security, Legal, Finance, and Internal Audit to align on governance and compliance priorities
• Ensure third-party vendors and service providers meet compliance and control expectations
• Provide strategic direction for IT risk, compliance, and governance initiatives across the organization
• Oversee the implementation and testing of security controls. Collaborate with internal and external auditors to demonstrate compliance
• Ensure ITGC (IT General Controls), application controls, and automated controls meet regulatory and audit requirements
• Lead the planning, execution, and management of the IT SOX program, including annual scoping, control design, testing, remediation, and reporting
• Establish and enforce IT policies, standards, and procedures to ensure consistency and compliance
• Coordinate with internal and external auditors, providing documentation, walkthroughs, and evidence to support SOX audits

Requirements

• Professional certifications such as CISA, CRISC, CGEIT, CISSP, or CPA
• Strong understanding of SOX 404, ITGC frameworks, and audit methodologies
• 10+ years of IT audit, SOX compliance, IT governance, or risk management experience
• Experience in complex, global, or publicly traded organizations
• Experience implementing or maturing IT governance frameworks (COBIT, NIST)
• Bachelor’s degree in Information Technology, Information Systems, Accounting, Finance, or related field
• Proven ability to lead teams and drive cross-functional initiatives
• Master’s degree or MBA
• Experience working with internal/external auditors and leading SOX programs

Benefits

Training + Development

Interview process

Visa Sponsorship

Security clearance