Global IT Regulatory Compliance Lead (SOX & Privacy)

A.O. Smith; Nashville (TN); Hybrid; USD 150,000 - 190,000; Full time

Benefits offered by this job

Medical and dental insurance

401(k) retirement plan

Life insurance

Tuition assistance

Job summary

A. O.

Smith is seeking a Senior Manager, IT Regulatory Compliance who will join the IT leadership team to establish and maintain global technology risk controls, governance, and regulatory compliance programs across ERP, cloud, and third-party environments. You will lead SOX IT compliance, align with NIST/COSO/privacy regulations, work with Legal/Privacy, IT and Audit, and drive measurable improvements in control design and evidence quality.

Qualifications

• Bachelor’s degree in a related field; MS or MBA preferred.
• CISA or ability to obtain within one year; other security/privacy certifications are a plus.
• 8–12+ years in technology risk, IT audit, IT compliance, or privacy within global orgs.
• Deep expertise in COSO and NIST frameworks; familiarity with ISO 27001/27701 advantageous.

Responsibilities

• Thought leadership translating requirements into strategy, roadmaps, and decisions.
• Define program KPIs/KRIs, monitor trends, and drive control optimization.
• Lead 2nd-Line SOX IT Compliance oversight across ERPs and technologies.
• Establish and maintain global IT and privacy control standards.
• Align controls with frameworks and regulations (NIST, COSO, GDPR, etc.).
• Provide 2nd-line oversight across SDLC and system implementations.

Skills

Technology risk

Regulatory compliance

SOX IT compliance

IT governance

Privacy programs

Education

Bachelor’s degree

MS or MBA preferred

Tools

SAP ECC

GRC tools

Security tooling

Job description

A. O.

Smith is seeking a Senior Manager, IT Regulatory Compliance who will join the IT leadership team to establish and maintain global technology risk controls, governance, and regulatory compliance programs across ERP, cloud, and third-party environments. You will lead SOX IT compliance, align with NIST/COSO/privacy regulations, work with Legal/Privacy, IT and Audit, and drive measurable improvements in control design and evidence quality.