Role: IT Compliance Manager
Location: Boston, MA
Duration: Long Term Contract
Technical Skills:
· Strong capability to plan, schedule, and execute internal audits for SOC1, SOC2, and MAR, with deep expertise in ITand application control testing.
· Experienced in working with stakeholders across IT, business, and leadership to define scope, conduct walkthroughs, review controls, and ensure accurate interpretation of compliance requirements.
· Expert in assessing control design and operating effectiveness using walkthroughs, sampling, re-performance, and evidence inspection.
· Proficient in evaluating evidence quality, determining compliance status, identifying exceptions, and documenting clear, defensible audit conclusions.
· Skilled in recommending remediation actions and process improvements to strengthen control environments and align with SOC1, SOC2, and MAR expectations.
· Strong experience validating remediation efforts, confirming closure of audit findings, and driving year-round audit readiness.
· Adept in preparing teams for external audits by ensuring all evidence, artifacts, and documentation are complete, accurate, and audit-ready.
· Proficient with GRC platforms (e.g., AuditBoard) for managing control inventories, testing workflows, evidence repositories, and issue tracking.
· Effective at communicating audit results, control weaknesses, and readiness gaps to stakeholders in a clear and actionable manner.
· Capable of coordinating audits across diverse environments including cloud platforms, identity systems, security tools, and enterprise applications.
· Strong ability to manage multiple concurrent audit cycles while maintaining high quality and meeting strict deadlines.
· Practical experience integrating compliance requirements into operational processes and recommending enhancements that reduce long-term risk.
Process Skills:
· Skilled in planning and executing quarterly compliance assessments and maintaining centralized evidence repositories for continuous audit readiness.
· Strong coordination capability for evidence collection and remediation updates across multiple teams and business units.
· Experienced in preparing management dashboards, compliance reports, and KPI metrics for leadership reviews.
· Proficient in issue management—logging, tracking, validating, and closing audit findings with full documentation.
· Experienced in governance cadence: scheduling review meetings, facilitating walkthroughs, and tracking remediation progress.
· Familiar with ITIL processes and integrating control requirements into operational workflows.
· Competent in using automation, templates, and accelerators to improve compliance efficiency and consistency.
· Strong understanding of IT security policies, procedures, and control design principles.
· Strong leadership, communication, presentation, and organizational skills with the ability to work independently or as part of a team.
· Solid practical knowledge of IT applications, infrastructure, risks, and controls; able to produce high-quality written output.
Behavioral Skills:
· Strong interpersonal communication, collaboration, and team-building abilities.
· Solid analytical and decision-making skills.
· Ability to meet strict SLAs, maintain structure, and make informed technical decisions under pressure
Qualification:
· Mandatory hands-on experience executing SOC1, SOC2, and MAR audits.
· Bachelor’s degree in Computer Science, Information Systems, or equivalent experience.
· 12+ years of professional experience, including 7+ years in IT Compliance, IT Risk, or Audit leadership roles.