OverviewPosition OverviewThe
IT Audit and Compliance Manager is responsible for leading and managing the organization's IT audit, risk assessment, and compliance programs. This role ensures that IT systems, processes, and controls comply with internal policies, industry standards, and regulatory requirements. The manager will work closely with IT, security, finance, and business teams to strengthen internal controls, mitigate risks, and support strategic initiatives.
Responsibilities and QualificationsKey ResponsibilitiesAudit & Risk Management- Plan, execute, and manage IT audits to evaluate the design and effectiveness of internal controls, security measures, and operational processes.
- Demonstrated experience managing and testing SOX controls within a publicly traded company, ensuring compliance with financial and IT regulatory requirements.
- Conduct risk assessments to identify gaps and vulnerabilities in IT systems and processes.
- Conduct 3rd-party risk assessments to identify gaps and vulnerabilities in IT systems and processes with vendors in accordance with NIST.
- Develop and maintain audit plans aligned with business priorities and regulatory changes.
- Track, monitor, and report remediation efforts from audit findings and ensure timely closure.
Compliance & Governance- Ensure adherence to regulatory requirements (e.g., SOX, NIST, PCI).
- Ensure adherence to PCI-DSS 4.0 regulatory requirements, with scope reductions (segmentation, iFrame, and P2PE).
- Manage IT compliance frameworks, policies, and procedures to maintain robust governance.
- Collaborate with legal, finance, and business stakeholders to ensure compliance across systems and processes.
- Stay updated on regulatory changes and assess their impact on IT and business operations.
Leadership & Collaboration- Lead and manage tax audits, inquiries, and examinations by US federal, state, and Canadian tax authorities.
- Mitigate tax risks through proactive monitoring, internal controls, and process improvements.
- Coordinate with external auditors and advisors regarding tax-related matters.
Continuous Improvement- Lead and mentor the IT audit and compliance team.
- Partner with IT and security teams to promote best practices in information security and data protection.
- Serve as the primary liaison with external auditors, regulators, and third-party assessors.
- Provide senior management with reports, insights, and recommendations to strengthen compliance posture.
Additional Responsibilities & Miscellaneous- Perform other duties as assigned to support IT and Corporate objectives.
Qualifications- Education: Bachelor's degree in Information Systems, Computer Science, Accounting, or related field (Master's preferred).
- Certifications: CISA, CISM, CISSP, CRISC, or similar highly desirable.
- Experience:
- 7+ years in IT audit, compliance, or risk management roles.
- Strong understanding of IT general controls, cybersecurity frameworks, and regulatory requirements.
- Proven experience managing audits and compliance projects in large organizations.
- Skills:
- Excellent analytical, problem-solving, and organizational skills.
- Strong communication skills to engage both technical and non-technical stakeholders.
- Ability to manage multiple priorities in a fast-paced environment.
Compensation and BenefitsReports ToVP - PMO
CompensationThe listed pay range reflects the expected base rate for the position; actual compensation may vary based on factors such as experience, qualifications and cost of living in the assigned market. This is a full-time position with competitive pay and benefits.
- Base: $130,000 - $150,000 per Year
- Bonus: 20% Target Bonus
- Total Compensation (Base + Bonus): The successful candidate could reasonably expect a Total Compensation Package in the range of $150,000 - $190,000.
- Equity: This role is not eligible to participate in the Lowe's Long-Term Incentive (LTI) program.
BenefitsAt FBM, we're committed to supporting our employees both personally and professionally. We offer a comprehensive and competitive benefits package designed to help you thrive inside and outside of work. Our excellent package includes:
- Medical
- Dental
- Vision
- HSA/ FSA plans
- Voluntary Life and Accidental Death & Dismemberment (AD&D) Insurance
- Critical illness, Hospital Indemnity, Accident Coverage
- Legal Insurance Plan
- Paid Time Off & Paid Holidays
- Generous 401(k) plan with company match
