Commercial Metals Company

Director, IT Governance, Risk & Compliance

Commercial Metals Company • $150K — $180K *
Irving, TX 75061In-Person
Information Technology
11 - 15 years of experience
Today
Be an Early Applicant
Job Overview by Ladders

Qualifications

  • 12+ years in IT audit, technology risk, governance, compliance, or cybersecurity assurance, with at least 5 years in leadership roles
  • Experience in leading IT audit or compliance functions in large enterprises
  • Big 4 public accounting or external audit experience preferred
  • Deep knowledge of SOX ITGCs, control design, and testing
  • Strong familiarity with enterprise applications and infrastructure controls, especially SAP
  • Proven success in enhancing compliance program maturity and audit readiness
  • Excellent executive-level communication and stakeholder management abilities
  • CISA certification strongly preferred; other relevant certifications are beneficial

Responsibilities

  • Lead the development of CMC's IT Governance, Risk & Compliance program
  • Implement consistent governance standards across technology functions
  • Enhance control design and compliance monitoring relative to risk
  • Align business objectives with technology strategy and compliance needs
  • Champion a culture of accountability and continuous improvement in compliance
  • Serve as primary IT contact for Internal Audit and compliance stakeholders
  • Streamline audit readiness by standardizing documentation and evidence management
  • Collaborate with cross-functional teams to address audit findings and improve control processes

Benefits

  • Comprehensive health benefits package
  • Generous retirement plan
  • Professional development support
  • Flexible work arrangements and remote work options
  • Paid time off and holidays
Full Job Description
What You'll Do
  • Lead the continued maturation of CMC's IT Governance, Risk & Compliance program and define the next phase of its maturity strategy
  • Establish consistent governance standards, accountability models, decision rights, and control ownership across technology functions
  • Strengthen control design, policy management, compliance monitoring, and standard artifacts, with rigor proportionate to financial, regulatory, cybersecurity, and operational risk
  • Drive alignment among business objectives, technology strategy, compliance requirements, and risk management priorities
  • Promote a culture of accountability, operational discipline, and continuous improvement in which compliance is embedded in day-to-day delivery
  • Serve as the primary IT leadership interface for Internal Audit, external auditors, and compliance stakeholders
  • Improve audit readiness through standardized evidence management, documentation practices, remediation governance, control monitoring, request intake, and clear closure criteria
  • Partner with technology and business leaders to proactively address audit findings, improve evidence quality, and reduce recurring deficiencies and late-cycle surprises
  • Provide executive-level insight on governance maturity, compliance performance, control effectiveness, remediation aging, evidence quality, and emerging risk
  • Ensure compliance activities improve operations and control effectiveness rather than simply satisfy audit requirements, while maintaining the distinction between management ownership and independent assurance
  • Oversee ITGC and SOX compliance across access management, change management, computer operations, interfaces, key reports, and technology-dependent controls
  • Establish and execute annual approach to IT SOX scoping in collaboration with Internal Audit and management stakeholders
  • Direct governance for SAP access, segregation of duties, privileged access, Firefighter / emergency access, user access reviews, and SAP GRC capabilities
  • Establish a risk-based method to prioritize deficiencies by financial reporting exposure, regulatory impact, cybersecurity risk, and operational complexity
  • Partner with IT, Finance, Internal Audit, Cybersecurity, and business stakeholders to support effective governance, compliance, and control execution
  • Support business units and control owners in identifying IT control gaps
  • Provide training and guidance to IT control owners and business unit managers on SOX requirements, control objectives, and best practices
  • Implement a repeatable evidence operating model with standardized repositories, request ownership, naming conventions, quality checks, retention requirements, and closure criteria
  • Drive timely, sustainable remediation of deficiencies and validate that corrective actions are designed, implemented, documented, and testable
  • Establish dashboards and metrics that show control effectiveness, exceptions, remediation progress, audit demand, and recurring failure patterns
  • Identify opportunities to automate controls, evidence collection, access reviews, monitoring, and reporting through SAP GRC and other enabling technologies
  • Use lessons learned from audits and control failures to improve processes, training, system design, and accountability
  • Work with management to evaluate control evidence against quality standards prior to submitting it to auditors
  • Identify control deficiencies and recommend remediation plans in collaboration with Internal Audit


What You'll Need
  • 12+ years of progressive experience in IT audit, technology risk, governance, compliance, cybersecurity assurance, or related disciplines, including at least 5 years leading managers or senior professional teams
  • Proven experience leading and maturing an IT audit, technology compliance, governance, or technology risk organization within a large, complex enterprise
  • Prior Big 4 public accounting or external audit experience serving large companies is strongly preferred, with direct responsibility for IT audit, SOX ITGC, controls assurance, or technology risk engagements
  • Deep knowledge of SOX ITGCs, control design and testing, risk assessment, deficiency evaluation, remediation, audit evidence, and management reporting
  • Strong working knowledge of enterprise applications and infrastructure controls, including SAP security, segregation of duties, privileged access, change management, computer operations, interfaces, and key reports
  • Demonstrated success improving audit readiness, strengthening control environments, reducing repeat findings, and advancing compliance program maturity beyond tactical audit response
  • Executive-level communication and stakeholder management skills, including the ability to influence across IT, Finance, Internal Audit, external auditors, and business leadership
  • CISA certification strongly preferred. CPA, CIA, CRISC, or other relevant certification is a plus
  • Experience with SAP S/4HANA, SAP GRC, ServiceNow GRC / IRM, Workiva, Archer, MetricStream, or comparable governance and compliance platforms
  • Knowledge of commonly used frameworks and requirements such as COBIT, COSO, NIST CSF, ISO 27001, SOC reporting, CMMC, NIS2, and AI governance


Your Education
  • Bachelor's degree in Information Systems, Accounting, Finance, Cybersecurity, Business, or a related field. MBA preferred

About Commercial Metals Company

Commercial Metals Company Careers

Join the dynamic team at Commercial Metals Company (CMC), a global leader in the manufacturing and recycling of metals, where innovation meets sustainability. At CMC, we offer a range of job opportunities that empower you to make a tangible impact on the world and our future.

Work You’ll Do

Embark on a career with Commercial Metals Company and be part of a team that’s dedicated to excellence and leadership in the industry. Our company thrives on diversity and is committed to creating an inclusive environment where all employees can flourish.

Innovate and Lead

At CMC, innovation is at the core of what we do. We are constantly seeking professionals who are ready to drive innovation and lead the industry towards sustainable practices. With CMC, you will work alongside top minds in the field to develop solutions that not only meet today’s demands but also anticipate the needs of tomorrow.

Career Growth and Development

We believe in nurturing the growth of our employees through professional development and leadership training programs. CMC offers a variety of career paths and resources to help you reach your full potential, including mentorship opportunities, workshops, and on-the-job training.

Join Our Team

Explore job opportunities at Commercial Metals Company and find a position that matches your skills and passions. We are hiring creative, curious, and motivated individuals who are ready to contribute to our team and grow their careers. Whether you’re looking for an entry-level position or a more senior role, CMC provides a platform for professional growth and innovation.

Internship Programs

Kickstart your career with a CMC internship. Our internships provide invaluable workplace experience and a chance to develop your skills in a real-world setting. Interns at CMC gain hands-on experience, working on projects that not only challenge them intellectually but also contribute to their professional growth.

Benefits and Culture

At CMC, we understand that our employees are our greatest asset. That’s why we offer competitive benefits to ensure the well-being of our team members and their families. From health and wellness programs to flexible working conditions, we strive to support our employees in every aspect of their lives.

Networking and Professional Development

Enhance your career through networking opportunities within CMC. Our employees have access to an extensive network of professionals and industry experts, which opens doors to new collaborations, ideas, and career opportunities. Engage in continuous learning and development to keep your skills sharp and your career moving forward.

Diversity and Inclusion

Diversity is the cornerstone of our success at Commercial Metals Company. We are committed to fostering an inclusive environment where every employee can thrive. Our diversity training programs are designed to educate and inspire our team, promoting an understanding of different perspectives and cultures.

Apply Now

Ready to take the next step in your career? Check out the latest job openings at Commercial Metals Company. Prepare your resume, sharpen your interview skills, and join a company that values growth, leadership, and innovation. Discover how your talents can make a difference at CMC.

Stay Connected

Keep up to date with the latest news, career tips, and job alerts from Commercial Metals Company. Join our community of driven professionals and see where your career can take you.

SEARCH COMMERCIAL METALS COMPANY JOBS

Join us at Commercial Metals Company, where your career is just as important to us as it is to you. Explore the possibilities today.
Learn more about Commercial Metals Company
Size
11,089 employees
Market Cap
$5.8 billion
Industry
Manufacturing & Automotive
Net Income
$260.2 million
Founded
1915
5 Year Trend
+18.3%
Revenue
$5.4 billion
NASDAQ
CMC
* Ladders Estimates

Similar Jobs

Ad banner background

Get Ready For Your
Next Interview

More Jobs at Commercial Metals Company

More Information Technology Jobs

Find similar Director, IT Governance, Risk & Compliance jobs:

NationwideIrving, TX