Trinity Industries

Sr. Manager, IT Governance, Risk, and Compliance

Trinity Industries$120K — $150K *
Information Technology
5 - 7 years of experience
Job Overview by Ladders

Qualifications

  • Bachelor's or technical degree preferred in Computer Science, Information Systems, Business Administration, or related field.
  • 5-7 years of IT audit/compliance, risk assurance, IT advisory, or internal audit experience.
  • At least 3 years of leadership experience managing a team.
  • Strong expertise in IT general controls (ITGCs), SOX compliance, and audit lifecycle processes.
  • Relevant certifications such as ITIL, ISO 27000, COBIT, CISSP, SANS, CISA, Security+, or CMMC are preferred.

Responsibilities

  • Lead ITGC control design and customization activities to streamline compliance processes.
  • Manage documentation supporting SOX regulatory requirements and internal policy compliance.
  • Serve as a Subject Matter Expert on IT compliance and advise on regulatory impacts.
  • Oversee the Trinity IT Compliance Assessment Program and coordinate assessments.
  • Manage the SOX compliance training program and ensure alignment with HR for distribution.
  • Act as the liaison between IT and audit teams for SOX and SOC engagements.
  • Monitor and report on the execution of ITGCs and prepare for audits.

Benefits

  • Opportunities for mentorship and professional development.
  • Exposure to high-level executives including the Chief Information Security Officer.
  • Engagement in cross-departmental collaboration with various leadership.
  • Potential for impact on the strategic direction of compliance initiatives.
Full Job Description
Trinity Industries is seeking a Senior Manager of IT Governance, Risk, and Compliance (IT GRC) for our headquarters office in Dallas, TX. This position functions within the Information GRC (IGRC) team, reporting to the Senior Director of IGRC within the Information Risk Management (IRM) organization. IRM sits within the Legal organization under the Chief Information Security Officer (CISO) and Chief Privacy Officer (CPO) and provides information compliance program services to the IT organization. This role leads IT General Controls (ITGC) control design and oversight, compliance program execution, and audit relationship management across internal audit, external audit, and SOC engagements, partnering closely with IT leadership, the Chief Audit Executive, the Chief Information Officer, and the Chief Information Security Officer.

What you will do:
  • Lead ITGC control design activities including alignment, procedure customization, and verification, as well as annual control rationalization to identify gaps and eliminate redundant or unnecessary controls.
  • Manage IT process and control documentation including risk control matrices, process flowcharts, and control procedures to support SOX regulatory requirements and internal policy compliance.
  • Act as the primary Subject Matter Expert (SME) for IT and business leaders on IT compliance, SOX requirements, and cyber and technology risk, advising on control expectations and the regulatory impact of changes to applications and infrastructure.
  • Own the rollout and ongoing maintenance of the Trinity IT Compliance Assessment Program (TICAP), including scheduling assessments, coordinating with control owners, tracking results, and reporting outcomes to leadership.
  • Own the SOX compliance training program, including the creation and annual update of regulatory awareness, framework awareness, control owner awareness, and control procedure training packages. Coordinate with HR on publishing and distribution, and manage the control awareness attestation process.
  • Serve as the primary liaison between the IT organization and all internal and external audit resources, coordinating on behalf of IT across SOX ITGC, SOC 1, and SOC 2 audit engagements. Coordinate evidence requests for Test of Design and Test of Effectiveness, manage issue mitigation and remediation tracking, and provide audit status reporting to leadership.
  • Oversee ongoing ITGC monitoring and execution performance, including weekly metrics and remediation status reporting. Conduct ad-hoc and requested execution assessments to identify issues prior to audit.
Managerial Responsibilities
  • Manage the daily activities of IT GRC Specialist(s), including performance reviews, time sheet approvals, goal setting, professional development, and prioritization of team tasks and projects in alignment with organizational objectives.
  • Provide mentorship and guidance to team members, assisting in their career growth and skill development.
  • Act as a point of escalation for complex issues or challenges faced by the team.


Qualifications
What you will need:
  • Bachelor's or technical degree preferred (Computer Science, Information Systems, Business Administration, or related field). Industry equivalent experience combined with relevant certifications or specialized training will be considered.
  • Minimum of five to seven years of IT audit/compliance, risk assurance, IT advisory, or internal audit experience, including at least three years of experience leading a team.
  • Deep understanding of IT general controls (ITGCs), SOX compliance requirements, control design principles, and the audit lifecycle, including Test of Design and Test of Effectiveness. Familiarity with infrastructure, SDLC, and IT service management in complex enterprise environments.
  • Certification in one or more of the following is desired: ITIL, ISO 27000, COBIT, CISSP, SANS, CISA, Security+, CMMC

About Trinity Industries

Trinity Industries, Inc. is a diversified industrial company that owns market-leading businesses which provide products and services to the energy, transportation, chemical, and construction sectors. Trinity reports its financial results in five principal business segments: the Rail Group, the Railcar Leasing and Management Services Group, the Inland Barge Group, the Construction Products Group and the Energy Equipment Group. Trinity?s businesses provide industrial products and services ranging from railcars, barges, storage containers, and aggregates to highway products, structural wind towers, railcar parts, and railcar leasing and management services.
Learn more about Trinity Industries
Size
5,845 employees
Market Cap
$2.4 billion
Industry
Net Income
-$147.3 million
Founded
1933
5 Year Trend
-13.3%
Revenue
$1.9 billion
NASDAQ

Similar Jobs

More Jobs at Trinity Industries

More Information Technology Jobs

Find similar Sr. Manager, IT Governance, Risk, and Compliance jobs: