technology change management and IT compliance functions, serving as the organization's second line of defense for IT controls. This role owns SOX and IT General Controls (ITGC) compliance, partnering closely with Internal Audit and the third-party audit firm to ensure controls are designed, operating effectively, and remediated when gaps are identified. The Senior Manager also leads the enterprise Change Advisory Board (CAB) and change lifecycle process, ensuring change records, approvals, and audit sampling meet compliance and ITIL-aligned standards. This individual manages a team of compliance analysts and change management staff, driving process maturity, proactive monitoring, and training across the Digital & Technology organization.
KEY DUTIES AND RESPONSIBILITES:
- Own end-to-end SOX / ITGC compliance program for Digital & Technology, including control design, testing, evidence collection, and remediation tracking.
- Serve as the primary IT liaison to Internal Audit and the third-party audit firm (second line of defense), coordinating audit requests, walkthroughs, and findings resolution.
- Partner with Legal (Corporate Compliance) and Information Security to design and implement appropriate IT controls.
- Work with IT and business/finance leaders to ensure new initiatives and projects do not negatively impact compliance controls.
- Educate and guide project teams on incorporating appropriate IT General Controls into project scope from the outset.
- Regularly review the technology environment to proactively identify opportunities for additional IT General Controls where risk exists.
- Lead the Change Advisory Board (CAB), change lifecycle governance, and ServiceNow record hygiene to ensure changes are properly assessed, approved, and documented.
- Manage change coordination, queue management, emergency change support, and audit sampling / submitter compliance reporting.
- Define and continuously improve change management and IT compliance processes aligned to ITIL 3/4 best practices, including SLAs for low/medium/high-risk change approvals.
- Develop and deliver training on change management and IT compliance requirements across the Digital & Technology organization.
- Manage and develop a team of IT compliance analysts and change management staff, including hiring, goal-setting, and performance reviews.
- Build and maintain Archer / Power BI-based dashboards and reporting for proactive compliance monitoring, control status, and change trends.
- Provide leadership in continuous improvement of departmental practices; serve as a thought leader in addressing control opportunities for improvement.
EDUCATION AND EXPERIENCE:
EDUCATION: Bachelors/4 Yr Degree
YEARS OF RELEVANT WORK EXPERIENCE: 8+ years
YEARS OF MANAGEMENT EXPERIENCE: 3+ years
CERTIFICATIONS / LICENSES: CISA and/or CISSP certification preferred; ITIL 4 Foundation a plus. MBA, CGEIT, and/or PMP certification a plus. Equivalent hands-on experience in SOX/ITGC compliance and IT change management considered in lieu of certification.
SPECIFIC KNOWLEDGE AND SKILLS:
- 8+ years of Internal Audit and/or Compliance experience in the field of IT, including SOX compliance and IT General Controls (ITGCs) — control design, testing, and remediation.
- Experience partnering with Internal Audit, Legal/Corporate Compliance, Information Security, and third-party audit firms as a second line of defense for IT controls.
- Strong experience in IT Security, including network technologies.
- Deep understanding of ITIL 3/4 frameworks, particularly change, incident, and problem management processes.
- Hands-on experience with change management tooling (e.g., ServiceNow CAB/change module) and GRC platforms (e.g., Archer) for control management.
- Ability to work in a fast-paced, cross-functional environment across multiple concurrent tasks.
- Ability to effectively communicate at all levels across the company.
- Proven ability to coach and grow personnel; experience leading and developing compliance and change management teams.
- Strong analytical and reporting skills, including experience building dashboards (e.g., Power BI) for compliance and change monitoring.
- Keen attention to detail with superior organizational skills and a passion for driving change.
This job description is intended to describe the general nature and level of the work being performed by the individuals assigned to this job. This is not an exhaustive list of all duties and responsibilities. Management reserves the right to amend and change the duties and responsibilities of this job to meet business and organizational needs, as necessary.
#LI-CV1
