IT Governance, Risk & Compliance Leader

CMC; Irving (TX); On-site; USD 140,000 - 170,000; Full time

Benefits offered by this job

Day 1 Benefits Coverage

401(k) company match

Bonuses

Life and Disability Insurance

Employee Stock Purchase Plan

Training and Advancement Opportunities

Job summary

CMC is seeking an experienced IT Audit and Technology Risk leader to mature governance, risk, and compliance across our IT landscape. You will drive SOX ITGC, SAP access controls, and governance frameworks while partnering with Internal Audit, Finance, and business leaders.

The role emphasizes executive communication, control design, and remediation governance, with opportunities to influence strategy and improve audit readiness in a Fortune 500 environment.

Qualifications

• 12+ years of progressive experience in IT audit, technology risk, governance, compliance, cybersecurity assurance, or related disciplines.

Responsibilities

• Lead the maturation of CMC's IT Governance, Risk & Compliance program and define the next phase of its maturity strategy.
• Establish consistent governance standards, accountability models, decision rights, and control ownership across technology functions.
• Strengthen control design, policy management, compliance monitoring, and standard artifacts with rigor proportionate to risk.
• Drive alignment between business objectives, technology strategy, compliance requirements, and risk management priorities.
• Promote accountability and continuous improvement, embedding compliance in day-to-day delivery.
• Serve as IT leadership interface for Internal Audit, external auditors, and compliance stakeholders.
• Improve audit readiness through standardized evidence management, remediation governance, and closure criteria.
• Partner with IT, Finance, and business stakeholders to address audit findings and reduce deficiencies.
• Provide executive insight on governance maturity, control effectiveness, and emerging risk.
• Ensure activities improve operations and control effectiveness beyond mere audit compliance.
• Oversee ITGC and SOX compliance across access management, change management, and related controls.
• Establish annual IT SOX scoping with Internal Audit.
• Direct governance for SAP access, segregation of duties, and privileged access.
• Identify and prioritize deficiencies by financial exposure and cybersecurity risk.
• Collaborate with stakeholders to support governance, compliance, and control execution.
• Support control owners in identifying IT control gaps and providing guidance on SOX requirements.

Skills

IT governance

Risk management

SOX ITGC

Audit leadership

Stakeholder management

Regulatory compliance

Education

Bachelor's degree in Information Systems, Accounting, Finance, Cybersecurity, or related field

MBA preferred

Tools

SAP GRC

SAP access controls

ServiceNow GRC/IRM

Workiva

Job description

CMC is seeking an experienced IT Audit and Technology Risk leader to mature governance, risk, and compliance across our IT landscape. You will drive SOX ITGC, SAP access controls, and governance frameworks while partnering with Internal Audit, Finance, and business leaders.

The role emphasizes executive communication, control design, and remediation governance, with opportunities to influence strategy and improve audit readiness in a Fortune 500 environment.