IS-IT Compliance and Controls Manager

MasterCraft Boat Company

Northern (KY)

Hybrid

USD 110,000 - 160,000

Full time

8 days ago

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

MasterCraft Boat Company is seeking an IS-IT Compliance and Controls Manager to oversee IT governance, risk, and compliance across manufacturing facilities. This full-time role partners with IT, Finance, Internal Audit, Operations, Information Security, and external auditors to maintain a strong control environment.

You will lead controls administration, compliance management, audit coordination, change control, and asset governance, developing remediation plans and dashboards to track risk and

Qualifications

5-8 years in IT controls, compliance, audit, governance, cybersecurity, or risk management.
Experience supporting public company SOX IT controls.
Experience in manufacturing, multi-site operations, or distributed environments.
Experience with audit coordination, control testing, evidence collection, and remediation tracking.
Supervisory or cross-functional leadership experience preferred.

Responsibilities

Maintain and enhance the IT controls framework supporting compliance requirements.
Document, review, and update IT policies, standards, procedures, and control documentation.
Monitor effectiveness of IT General Controls and key technology-related business controls.
Coordinate periodic control testing and remediation activities.
Track control deficiencies, corrective action plans, and improvement opportunities.
Support SOX and cybersecurity governance programs across sites.
Coordinate evidence collection and retention required for audits.
Serve as IT liaison for internal and external audits.
Administer enterprise change management processes and governance standards.
Coordinate Change Advisory Board meetings and support change review processes.
Review change records for approvals, testing, documentation, and risk assessments.
Monitor change-related metrics, success rates, and compliance trends.
Support governance of IT asset management and configuration management processes.
Ensure inventories remain accurate and compliant; monitor licensing.
Develop remediation plans with business and technology teams.
Assist with business continuity and disaster recovery governance activities.
Monitor incident and event management compliance; ensure root cause analysis.

Skills

IT controls

Risk management

Audits

SOX compliance

Cybersecurity governance

Change management

Regulatory compliance

Process improvement

Leadership

Project management

KPI reporting

Data governance

Education

Bachelor's degree in Information Systems, Computer Science, Accounting, Business Administration, Risk Management, or related field

Job description

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

IS-IT Compliance and Controls Manager

Full Time Salary Management Vonore, TN, US

7 days ago Requisition ID: 1115

Position Summary

The IT Controls & Compliance Manager is responsible for overseeing the execution, monitoring, and continuous improvement of IT governance, risk, and compliance programs across multiple manufacturing facilities and business units. This role ensures that IT processes and controls support public company obligations, regulatory requirements, cybersecurity standards, and internal policies.

The position partners closely with Information Technology, Finance, Internal Audit, Operations, Information Security, and external auditors to maintain an effective control environment. The Manager serves as a day-to-day owner of IT control execution, compliance monitoring, audit coordination, change governance, and process improvement activities.

Key Responsibilities

Controls Administration & Governance

Maintain and enhance the IT controls framework supporting organizational compliance requirements.
Document, review, and update IT policies, standards, procedures, and control documentation.
Monitor effectiveness of IT General Controls and key technology-related business controls.
Coordinate periodic control testing and remediation activities.
Track and report control deficiencies, corrective action plans, and control improvement opportunities.

Compliance Management

Support compliance programs related to SOX, cybersecurity governance, data protection, and corporate policies.
Ensure compliance activities are performed consistently across business units and manufacturing locations.
Coordinate evidence collection and retention required for internal and external audits.
Maintain compliance records, documentation repositories, and audit support materials.

Audit Coordination

Serve as a primary IT liaison for internal and external audits.
Coordinate audit requests, interviews, testing schedules, walkthroughs, and evidence collection.
Track audit findings and ensure corrective actions are completed on schedule.
Assist management with audit response preparation and remediation planning.

Change Control Management

Administer enterprise change management processes and governance standards.
Coordinate Change Advisory Board meetings and support change review processes.
Review change records to ensure proper approvals, testing, documentation, and risk assessments are completed.
Monitor change-related performance metrics, success rates, emergency changes, and compliance trends.

Asset & Configuration Governance

Support governance of IT asset management and configuration management processes.
Ensure hardware, software, endpoint, server, and infrastructure inventories remain accurate and compliant.
Monitor software licensing compliance and asset lifecycle controls.
Validate compliance with asset disposition, refresh, and inventory management procedures.
Participate in periodic IT risk assessments across infrastructure, applications, manufacturing systems, and business processes.
Identify control gaps, process weaknesses, and compliance risks.
Develop and track remediation plans in partnership with business and technology teams.
Assist with business continuity and disaster recovery governance activities.
Monitor compliance with incident and event management processes.
Ensure root cause analysis and corrective actions are documented and completed.
Track operational and compliance metrics related to major incidents and service disruptions.
Identify process improvement opportunities based on incident trends and recurring issues.
Develop compliance dashboards, KPI reporting, and management updates.
Present compliance metrics, audit status, risk items, and remediation progress to IT leadership.
Recommend process improvements to strengthen governance, operational maturity, and audit readiness.
Support automation initiatives that improve control effectiveness, evidence management, and reporting.

Qualifications

Education

Bachelor's degree in Information Systems, Computer Science, Accounting, Business Administration, Risk Management, or related field.

Experience

5-8 years of experience in IT controls, compliance, audit, governance, cybersecurity, or risk management.
Experience supporting public company compliance requirements, including SOX-related IT controls.
Experience working within manufacturing, multi-site operations, or distributed business environments.
Experience with audit coordination, control testing, evidence collection, and remediation tracking.
Previous supervisory, team leadership, or cross-functional program leadership experience preferred.

Preferred Certifications

CISA
CRISC
CISSP
CIA
ITIL Foundation
PMP preferred

Technical

Leadership

Business

IT General Controls

Cross-functional collaboration

Manufacturing operations awareness

SOX Compliance

Process improvement

Financial controls understanding

Change Management

Project management

Regulatory compliance

Audit Management

Communication and presentation skills

Organizational effectiveness

Business process discipline

Policy Governance

Follow-through and accountability

Asset Management

Cybersecurity Controls

Key Performance Indicators

ITGC testing completion: 100%
Audit findings closed on time: greater than 95%
Change success rate: greater than 98%
Emergency changes: less than 5%
Asset inventory accuracy: greater than 99%
Compliance training completion: 100%
Evidence collection timeliness: 100%
Policy review completion: 100%

Typical Reporting Structure

Reports to the Director, IT Site Services & Controls Compliance. This role may directly supervise or coordinate work performed by Controls Analysts, Compliance Analysts, Change Management Coordinators, Asset Governance Specialists, or other IT governance resources.

Key Stakeholders