ITGC Compliance Manager

---

Job description

Job Description

Position- ITGC Compliance Manager
Location- Remote within United States

The SOX and ITGC Compliance Manager will have primary responsibility for ensuring the effectiveness of all IT General Controls (ITGCs) and application controls related to Business Technology. The manager will act as the primary point of contact between IT and internal/external auditors to provide leadership in managing auditing activities, requests and developing responses to audit findings, leading to remediation of audit findings. The role will also work closely with accounting business partners to ensure that SOX controls that involve business systems are implemented and operating effectively.

KEY CHARACTERISTICS:

Sound understanding of security and control principles including logical access controls, change control, least privilege, segregation of duties, computer operations, network security, vulnerability management, and secure coding
Broad technical understanding of data management platforms (e.g., SAP, PeopleSoft, Oracle, Microsoft SQL Server, etc.) and associated data security controls
Strong technology acumen and the ability to assess data privacy gaps in products/services design

RESPONSIBILITIES/WHAT YOU WILL BE DOING:

Provide quality assurance of all IT General Controls through assessment, walkthroughs, and audits to ensure operational effectiveness of those controls.
Monitor the control environment and ensure that controls are operational and in-line with established policies and procedures, and controls methodology
Identify risks and gaps and facilitate remediation to address observations raised in internal and external audits
Provide risk metrics to management regarding audit performance and findings
Assist control owners with root cause analysis and track risk management action plan progress
Guide efforts to create common control framework and uniform compliance reporting standard
Stay up to date on changes to systems and applications and provide guidance on related controls
Performing examination of IT General controls and application controls to determine design and operational effectiveness
Conducting IT controls management testing of controls independent of the audit schedule to save time during audits
Identifying and tracking assessment/audits using performance metrics
Implementing and supervising the issue tracking and resolution process
Reviewing the audit assessments conducted by both internal and external audit teams
Collaborating with both internal and external auditors
Reviewing third-party vendor attestation and audit reports, and providing feedback to business leaders and risk owners
Provide relevant awareness training to control owners