13 дней назад
Director, IT Governance, Risk & Compliance (SOX)
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
Director, IT Governance, Risk & Compliance (SOX) (IT Governance/SAP GRC): Leading the maturation of CMC's IT governance, risk, and compliance program with an accent on SOX ITGCs, SAP security, audit readiness, and control effectiveness. Focus on establishing risk-based governance, improving evidence and remediation processes, and strengthening controls across a complex enterprise.
Location: Irving, Texas, United States
Company
is a Fortune 500 manufacturing company producing steel, construction reinforcement, and ground stabilization products for infrastructure projects.
What you will do
- Lead the maturation strategy for the IT Governance, Risk & Compliance program.
- Establish governance standards, accountability models, decision rights, and control ownership across technology functions.
- Oversee ITGC and SOX compliance across access management, change management, computer operations, interfaces, key reports, and technology-dependent controls.
- Direct SAP governance, including segregation of duties, privileged access, emergency access, user access reviews, and SAP GRC capabilities.
- Improve audit readiness through standardized evidence management, control monitoring, documentation, remediation governance, and closure criteria.
- Provide executive-level reporting on governance maturity, control effectiveness, remediation progress, audit demand, and emerging risks.
Requirements
- 12+ years of progressive experience in IT audit, technology risk, governance, compliance, cybersecurity assurance, or related fields.
- At least 5 years of experience leading managers or senior professional teams.
- Deep knowledge of SOX ITGCs, control design and testing, risk assessment, deficiency evaluation, remediation, audit evidence, and management reporting.
- Strong knowledge of SAP security, segregation of duties, privileged access, change management, computer operations, interfaces, and key reports.
- Bachelor’s degree in Information Systems, Accounting, Finance, Cybersecurity, Business, or a related field; MBA preferred.
- CISA is strongly preferred; CPA, CIA, CRISC, or another relevant certification is a plus.
Nice to have
- Big Four public accounting or external audit experience with large enterprises.
- Experience with SAP S/4HANA, SAP GRC, ServiceNow GRC/IRM, Workiva, Archer, MetricStream, or comparable platforms.
- Knowledge of COBIT, COSO, NIST CSF, ISO 27001, SOC reporting, CMMC, NIS2, and AI governance.
Culture & Benefits
- Medical, vision, and dental coverage from day one.
- Paid time off and vacation from day one.
- Company-matched 401(k) plan with a 4.5% match.
- Company-paid life and disability insurance, plus a $500 annual lifestyle benefit.
- Training, advancement opportunities, competitive compensation, bonuses, and an employee stock purchase plan.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →