IT Risks & Control Manager
Core
Embedded IT risk and controls partner for engineering and technology organizations, strengthening the IT SOX framework and ensuring compliance for a custom-built AI cloud platform.
Role type
Senior IC IT Risk & Controls Manager
Builds
Scalable IT SOX and controls framework for AI cloud infrastructure and corporate technology
Domain
Cloud Infrastructure / AI / IT Governance
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
IT SOX, ITGCs, IT application controls, automated controls, COSO, COBIT, control design, risk assessment, remediation oversight, cloud infrastructure, DevOps, CI/CD, Kubernetes, IAM, SDLC, third-party risk assessment, data analytics for controls
Preferred skills
CISA, CRISC, CISM, CIA, CPA, building IT SOX frameworks in listed/pre-IPO tech companies, AI infrastructure experience, GRC tools (Workiva, Jira, ServiceNow), enterprise SaaS/financial systems
Technologies
Kubernetes, Workiva, Jira, ServiceNow, NetSuite
Responsibilities
Act as risk partner for assigned tech orgs/systems, own and improve IT risk/control framework, lead IT SOX readiness and testing, partner with engineering/security to design scalable controls, assess ITGCs and application controls, evaluate business control dependencies, apply controls to modern engineering practices, remediate control gaps from transformations, review third-party assurance reports, align with external auditors, translate technical risks to stakeholders, use data analytics to improve control efficiency, develop controls methodology and reporting.
Seniority
Senior, hands-on IC