IT Controls Manager

Title: IT Controls Manager

Location: Newark, NJ Hybrid role

Job Description

Job Summary

The IT Controls Manager is responsible for defining and managing information technology controls across regulatory and compliance frameworks, including SOX, NIST, and 10 CFR Part 810. This role partners closely with IT, cybersecurity, finance/supply chain, internal audit, and business stakeholders to ensure controls are designed effectively, operating as intended, and continuously improved to mitigate risk and meet regulatory obligations.

Responsibilities:

• Design, document, and maintain IT general controls (ITGCs), application controls, and cybersecurity controls aligned to SOX, NIST, and 10 CFR Part 810 requirements.
• Lead annual and ongoing SOX IT controls scoping, risk assessments, walkthroughs, testing, and remediation activities.
• Define and manage NIST-based security controls (e.g., NIST SP 800-53, 800-171, or CSF) across infrastructure, applications, and data environments.
• Establish and maintain compliance controls supporting 10 CFR Part 810, including technology access, data handling, export controls, and auditability.

• Develop and execute control testing plans, including design effectiveness and operating effectiveness testing.
• Track, manage, and validate remediation of control deficiencies, including root cause analysis and corrective action plans.

• Maintain IT risk and control documentation, including risk assessments, control matrices, policies, procedures, and evidence repositories.
• Provide subject matter expertise on IT risk, cybersecurity, and regulatory compliance to leadership and key stakeholders.

• Work with IT, Security, Finance/supply chain, Compliance, and Business teams to embed controls into system design, SDLC, and operational processes.
• Train control owners on control responsibilities, documentation standards, and evidence requirements.

Required Qualifications:

• 7+ years of experience in IT controls, risk management, or cybersecurity compliance.
• Hands-on experience defining, testing, and managing controls for:
• SOX IT General Controls
• NIST frameworks (e.g., 800-53, 800-171, CSF)
• 10 CFR Part 810 or similar export control/regulatory environments
• Strong understanding of IT infrastructure, cloud platforms, access management, change management, and system development life cycle (SDLC).
• Experience working with internal and external auditors.

• Professional certifications such as CISA, CISSP, CRISC, CPA, or similar.
• Familiarity with GRC tools (e.g., ServiceNow GRC, Archer, AuditBoard).

• Strong documentation and communication skills
• Analytical thinking and attention to detail