Manager, IT Governance, Risk & Compliance (SOX)

Location: Fully remote, with the role associated with Richmond, Virginia, United States

Salary: $134,400–$168,000 annually

Company

hirify.global provides on-demand talent, consulting, and outsourced services through a global network of more than 2,600 experts.

What you will do

• Govern the enterprise IT GRC program, including SOX ITGCs, ITACs, and ICFR controls.
• Maintain the IT control framework, perform annual scoping and risk assessments, and approve control designs, narratives, testing plans, and workpapers.
• Oversee controls across access management, change management, computer operations, SDLC, privileged access, backups, job scheduling, and cloud deployment pipelines.
• Coordinate internal and external audits, approve evidence packages, prepare control reporting, and support Audit Committee materials.
• Lead deficiency analysis, remediation validation, residual risk assessments, access governance, third-party risk reviews, and privacy control testing.
• Provide technical direction and quality review for domestic, offshore, international, and co-source resources while supporting compliance automation and continuous control monitoring.

Requirements

• Bachelor’s degree in Management Information Systems, Computer Science, Information Security, Accounting, or a related field.
• 6+ years of experience in IT Audit, IT GRC, or Information Security Compliance, including 2+ years in a senior or lead SOX compliance capacity.
• Hands-on experience performing and reviewing ITGC and ITAC testing in a SOX 404 environment and preparing ICFR management assertion evidence.
• Active professional certification required; CRISC or CISM preferred, with CISA, CIA, or CISSP accepted.
• Experience with ERP and finance systems, Entra ID or Okta, PAM tools, SQL Server or Oracle, CI/CD, Azure, GRC platforms, OneTrust, and continuous control monitoring tools.
• Working fluency in SOX 404, COBIT, COSO, NIST CSF, and ISO 27001, with familiarity with GDPR, CCPA/CPRA, and HIPAA.

Culture & Benefits

• Fully remote work arrangement.
• Medical, dental, vision, life, and disability insurance based on eligibility.
• 401(k) Savings Plan and Employee Stock Purchase Plan.
• Professional Development Program, paid time off, paid holidays, and paid sick time where legally required.
• Focus on continuous learning, meaningful work, inclusive collaboration, and professional development.