IT Audit & Compliance Lead: SOX & Risk Controls

Foundation Building Materials; Santa Ana (CA); On-site; USD 130,000 - 190,000; Full time

Benefits offered by this job

Medical

Dental

Vision

HSA/FSA plans

Paid Time Off & Holidays

Generous 401(k) match

Job summary

Foundation Building Materials is seeking an IT Audit and Compliance Manager in Santa Ana, CA to lead IT audits, risk assessments, and compliance initiatives across the organization. The role collaborates with IT, security, finance, and business teams to strengthen controls and mitigate risks.

Qualified candidates will have 7+ years in IT audit or risk management, strong knowledge of SOX, NIST, PCI, and relevant certifications.

Qualifications

• Bachelor’s degree in IS/CS/Accounting or related field; Master’s preferred.
• 7+ years in IT audit, compliance, or risk management roles.
• Certifications: CISA, CISM, CISSP, CRISC desirable.

Responsibilities

• Plan, execute, and manage IT audits to evaluate the design and effectiveness of internal controls, security measures, and operational processes.
• Ensure adherence to SOX, NIST, PCI and other regulatory requirements across IT systems and processes.
• Lead and mentor the IT audit and compliance team and coordinate with external auditors and regulators.
• Provide senior management with reports, insights, and recommendations to strengthen compliance posture.
• Collaborate with legal, finance, and business stakeholders to ensure governance across systems.

Skills

IT audit

Regulatory compliance

SOX controls

NIST framework

Cybersecurity

Stakeholder communication

Analytical skills

Education

Bachelor’s degree in Information Systems, Computer Science, or Accounting

Master’s degree preferred

Job description

Foundation Building Materials is seeking an IT Audit and Compliance Manager in Santa Ana, CA to lead IT audits, risk assessments, and compliance initiatives across the organization. The role collaborates with IT, security, finance, and business teams to strengthen controls and mitigate risks.

Qualified candidates will have 7+ years in IT audit or risk management, strong knowledge of SOX, NIST, PCI, and relevant certifications.