Position: Senior Manager of IT ComplianceSupervisor: Sr Director, Office of the CIOLocation: Rosemont, ILDescription:The
Senior Manager of IT Compliance will play a key role in developing, implementing, and maintaining the company's IT governance, risk, and compliance (IT GRC) framework to support ongoing regulatory requirements. This position will oversee IT General Controls (ITGCs), data privacy compliance, risk assessments, and IT policy development to ensure the company's technology landscape aligns with SOX, GDPR, and other relevant standards.
This role will partner closely with IT, Finance, Legal, Internal Audit, and external advisors to manage IT risks and ensure the company is well-prepared for the control and compliance expectations of a public company.
Key ResponsibilitiesIT Governance & Controls- Design, implement, and maintain effective IT General Controls (ITGCs) in alignment with SOX, COSO, and COBIT frameworks.
- Lead the IT Compliance function-ensuring systems, processes, and documentation meet audit and compliance requirements for a public company.
- Manage the ongoing monitoring and testing of IT controls and remediate deficiencies in collaboration with IT and business process owners.
- Establish and maintain a controls inventory, risk matrix, and documentation repository.
- Partner with Finance and Internal Audit to align IT controls with SOX compliance requirements.
- Support readiness assessments, audit walkthroughs, and control testing.
- Advise leadership on compliance risks and control maturity as part of ongoing governance.
Risk Management- Conduct IT risk assessments and maintain an IT risk register, ensuring alignment with enterprise risk management (ERM) processes.
- Identify and evaluate emerging technology risks, including cybersecurity, data governance, and third-party vendor risks.
- Develop and track remediation plans to address gaps and ensure timely resolution.
Data Privacy & Security Compliance- Partner with Legal, Security, and Data teams to maintain compliance with global data privacy regulations (GDPR, CCPA, etc.).
- Implement data handling policies, data classification standards, and retention requirements across systems.
- Support ongoing privacy audits and incident response processes.
Policy, Process, and Training- Develop, implement, and maintain IT compliance policies and standard operating procedures.
- Drive awareness and training initiatives to build a culture of compliance and accountability across the IT organization.
- Prepare and present compliance reports to management, the Audit Committee, and external auditors.
QualificationsEducation & Experience- Bachelor's degree in Information Systems, Computer Science, Accounting, or related field.
- 7-10 years of experience in IT audit, IT risk management, or IT compliance, preferably in a global, consumer goods, or manufacturing environment.
- Experience supporting SOX readiness or IPO transitions is strongly preferred.
- Knowledge of IT control frameworks (COBIT, COSO, NIST, ISO 27001) and privacy regulations (GDPR, CCPA, etc.).
Certifications (preferred):- CISA, CISSP, CRISC, CISM, or equivalent certification(s).
Skills & Competencies- Deep understanding of ITGCs across key domains (access management, change management, computer operations, program development).
- Strong project management and cross-functional collaboration skills.
- Excellent communication and stakeholder management abilities.
- Proactive, detail-oriented, and comfortable operating in a fast-paced, evolving environment.
Target Salary Range: $145,000 - $175,000 salary a year plus bonus. Exact pay will be based on factors including, but not limited to relevant education, qualifications, certifications, experience, level, geographic location, and business and organizational needs. Full-time positions are eligible for competitive benefits, including paid time off, health, dental, vision, life, disability benefits and 401(k).
Equal Opportunity Employer
This employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, please review the Know Your Rights notice from the Department of Labor.
Never miss an opportunity! Create an alert based on the job you applied for.
