Information Technology Governance Sr. Manager

Trinity Industries, Inc.; Dallas (TX); On-site; USD 140,000 - 190,000; Full time

Job summary

Trinity Industries, Inc. seeks a Senior Manager of IT Governance, Risk, and Compliance (IT GRC) to lead ITGC design, SOX compliance, and audit coordination from our Dallas headquarters.

You will act as the SME on IT compliance, manage TICAP and training programs, and coordinate with HR and audits to ensure regulatory alignment and risk mitigation across the IT landscape.

Qualifications

• Bachelor’s or technical degree in CS/IS/Business or related field; industry experience with relevant certifications considered.
• 5–7 years IT audit/compliance, risk assurance, or internal audit experience; at least 3 years leading a team.
• Deep understanding of IT general controls (ITGCs), SOX compliance, control design principles, and audit lifecycle.
• Familiarity with infrastructure, SDLC, and IT service management in complex enterprise environments.
• Certifications such as ITIL, ISO 27000, COBIT, CISSP, SANS, CISA, Security+, CMMC preferred.

Responsibilities

• Lead ITGC control design activities including alignment, procedure customization, and annual control rationalization.
• Manage IT process and control documentation to support SOX regulatory requirements and internal policy compliance.
• Act as SME for IT compliance, SOX requirements, and cyber/technology risk advising on control expectations.
• Own TICAP rollout, scheduling assessments, coordinating with control owners, tracking results, reporting to leadership.
• Own SOX training program; create and update regulatory awareness and control training packages with HR coordination.
• Serve as the primary liaison between IT and internal/external audit resources across SOX ITGC, SOC 1, and SOC 2 engagements.
• Oversee ongoing ITGC monitoring and remediation reporting; conduct ad-hoc assessments.

Skills

IT GRC knowledge

Leadership

SOX compliance

Audit experience

Regulatory advisory

Education

Bachelor’s degree in Computer Science or related field

Tools

ITIL

COBIT

CISA

SOX testing tools

Job description

Trinity Industries is seeking a Senior Manager of IT Governance, Risk, and Compliance (IT GRC) for our headquarters office in Dallas, TX.

What you will do:

• Lead ITGC control design activities including alignment, procedure customization, and verification, as well as annual control rationalization to identify gaps and eliminate redundant or unnecessary controls
• Manage IT process and control documentation including risk control matrices, process flowcharts, and control procedures to support SOX regulatory requirements and internal policy compliance
• Act as the primary Subject Matter Expert (SME) for IT and business leaders on IT compliance, SOX requirements, and cyber and technology risk, advising on control expectations and the regulatory impact of changes to applications and infrastructure
• Own the rollout and ongoing maintenance of the Trinity IT Compliance Assessment Program (TICAP), including scheduling assessments, coordinating with control owners, tracking results, and reporting outcomes to leadership
• Own the SOX compliance training program, including the creation and annual update of regulatory awareness, framework awareness, control owner awareness, and control procedure training packages. Coordinate with HR on publishing and distribution, and manage the control awareness attestation process
• Serve as the primary liaison between the IT organization and all internal and external audit resources, coordinating on behalf of IT across SOX ITGC, SOC 1, and SOC 2 audit engagements. Coordinate evidence requests for Test of Design and Test of Effectiveness, manage issue mitigation and remediation tracking, and provide audit status reporting to leadership
• Oversee ongoing ITGC monitoring and execution performance, including weekly metrics and remediation status reporting. Conduct ad-hoc and requested execution assessments to identify issues prior to audit

Managerial Responsibilities

• Manage the daily activities of IT GRC Specialist(s), including performance reviews, time sheet approvals, goal setting, professional development, and prioritization of team tasks and projects in alignment with organizational objectives
• Provide mentorship and guidance to team members, assisting in their career growth and skill development
• Act as a point of escalation for complex issues or challenges faced by the team

What you will need:

• Bachelor’s or technical degree preferred (Computer Science, Information Systems, Business Administration, or related field). Industry equivalent experience combined with relevant certifications or specialized training will be considered
• Minimum of five to seven years of IT audit/compliance, risk assurance, IT advisory, or internal audit experience, including at least three years of experience leading a team
• Deep understanding of IT general controls (ITGCs), SOX compliance requirements, control design principles, and the audit lifecycle, including Test of Design and Test of Effectiveness
• Familiarity with infrastructure, SDLC, and IT service management in complex enterprise environments
• Certification in one or more of the following is desired: ITIL, ISO 27000, COBIT, CISSP, SANS, CISA, Security+, CMMC