Head of IT Risk & Internal Controls (SOX) - Remote

RiseMe; United States; On-site; USD 124,000 - 215,000; Full time

Job summary

McGraw Hill seeks a Sr Director, IT Internal Controls & Risk Compliance for its Digital Enterprise Solutions (DES) group to lead the company’s SOX program and build a scalable IT governance framework across Oracle ERP, data & analytics, and SaaS offerings.

This remote role requires 10+ years in IT audit and a proven ability to partner with Finance, Internal Audit, and External Audit to mature IT controls and risk management across a multi-system environment.

Qualifications

• 10+ years in IT audit or IT risk management within a complex corporate environment.
• Proven track record planning and executing internal, SOX (Business & IT), operational, and IT audits.
• Experience working with PCAOB-regulated auditors and large enterprises.

Responsibilities

• Audit scope planning for SOX and SOC2 audits; end-to-end engagements from planning to reporting.
• Guide control owners on designing and implementing effective controls and remediation.
• Apply SOX, COSO, COBIT, and NIST frameworks to identify gaps and propose practical solutions.
• Lead IT General Controls evaluation including access provisioning, change management, and backups.
• Develop and sustain enterprise IT risk and compliance programs beyond initial SOX implementation.
• Coordinate audit activities with external auditors and cross-functional stakeholders across DES, IT, Finance, and Internal Audit.

Skills

IT audit

SOX compliance

IT risk management

COSO/COBIT/NIST

Leadership

Stakeholder management

Audit coordination

PCAOB experience

Public company experience

Big 4 experience

Tools

Audit management tools

Job description

McGraw Hill seeks a Sr Director, IT Internal Controls & Risk Compliance for its Digital Enterprise Solutions (DES) group to lead the company’s SOX program and build a scalable IT governance framework across Oracle ERP, data & analytics, and SaaS offerings.

This remote role requires 10+ years in IT audit and a proven ability to partner with Finance, Internal Audit, and External Audit to mature IT controls and risk management across a multi-system environment.