IT Compliance & Risk Leader — SOX & GRC

TKO; United States; On-site; USD 120,000 - 180,000; Full time

Job summary

TKO is seeking a Senior Manager, IT Governance, Risk and Compliance to lead day-to-day IT compliance activities across SOX, ITGC, and control governance. You will work with Legal, IT, Security, Internal Audit, Finance, and business units to strengthen the control environment and enterprise compliance.

The role combines subject matter expertise with hands-on execution in a complex, multi-unit setting, driving documentation, risk assessments, and remediation efforts while promoting a culture of

Qualifications

• 7+ years experience in IT compliance, IT audit, risk management, or a related governance function.
• Hands on experience developing and maintaining Risk and Control Matrices, process flows, remediation plans, system inventories, and related compliance documentation.
• Demonstrated experience supporting cross-functional stakeholders such as Legal, IT, Security, Internal Audit, Finance, and business leads

Responsibilities

• Support the Senior Director of IT Governance, Risk and Compliance in building the overall compliance strategy and roadmap
• Implementation and day-to-day support of an enterprise Governance, Risk and Compliance platform to include automation of risk and control matrices, evidence collection workflows, and executive reporting & dashboards
• Assist in tracking and delivery of key compliance initiatives including executive status updates regarding the program’s status and health
• Provide front line support, people management and subject matter expertise to system leads and business partners on compliance processes such as proper control execution, industry standard documentation, and change management best practices
• Assist in establishing, documenting, and maintaining IT compliance requirements
• Lead process re-design efforts to identify and eliminate redundant risk management processes and/or controls
• Understand and support the risk management objectives of other TKO risk management functions
• Maintain current inventories of in-scope systems and applications that are required to support key regulatory requirements (e.g., ICFR), in-flight IT projects, and relevant stakeholders
• Maintain IT compliance documentation and templates, including Risk and Control Matrices, process flows, system interface documentation, and remediation plans
• Assist in the review and assessment of documentation prepared by system leads and control owners for quality, completeness, and alignment with compliance requirements
• Provide support for internal and external audits, including SOX and IT General Controls testing
• Support the IT Compliance leader with collecting and maintaining evidence required for audit requests and management reviews, ensuring timely and accurate delivery of required materials
• Support identification, tracking, and remediation of control gaps, deficiencies, and related action plans
• Support risk assessments, control reviews, and compliance evaluations processes
• Monitor adherence with internal policies and key metrics regarding control environment activities (e.g. reconciliation activities, data analysis, data hygiene, etc.)
• Track application system owner’s adherence to the access termination process including conducting a look back analysis for terminations that do not meet the termination policy.
• Prepare reporting for management regarding compliance status, risks, remediation efforts, and control effectiveness
• Document, maintain and socialize training materials related to IT compliance, data privacy, and security practices
• Support awareness efforts for IT teams and business stakeholders to promote a culture of accountability and compliance
• 7+ years experience in IT compliance, IT audit, risk management, cybersecurity compliance, or a related governance function
• Hands on experience developing and maintaining Risk and Control Matrices, process flows, remediation plans, system inventories, and related compliance documentation
• Demonstrated experience supporting cross-functional stakeholders such as Legal, IT, Security, Internal Audit, Finance, and business leads

Skills

IT compliance

IT audit

risk management

cybersecurity compliance

data reconciliation

audit readiness

stakeholder collaboration

Education

Bachelor's degree in Computer Science

Tools

Excel

PowerQuery

SQL

Job description

TKO is seeking a Senior Manager, IT Governance, Risk and Compliance to lead day-to-day IT compliance activities across SOX, ITGC, and control governance. You will work with Legal, IT, Security, Internal Audit, Finance, and business units to strengthen the control environment and enterprise compliance.

The role combines subject matter expertise with hands-on execution in a complex, multi-unit setting, driving documentation, risk assessments, and remediation efforts while promoting a culture of