IT Risk Compliance Manager

Dataquad Inc.; Boston (MA); On-site; USD 120,000 - 180,000; Full time

Job summary

Dataquad Inc. in Boston, MA seeks an IT Compliance Manager with 10+ years of experience, including 7+ years in IT risk or audit leadership.

You will plan and execute SOC1, SOC2, and MAR audits, test ITGCs and application controls, and collaborate with IT, business, and leadership to interpret complex compliance requirements. You will drive remediation, coordinate audits across cloud and enterprise systems, maintain evidence repositories, and prepare executive dashboards with clear audit

Qualifications

• Mandatory hands‑on experience executing SOC1, SOC2, and MAR audits.
• Bachelor’s degree in Computer Science, Information Systems, or equivalent experience.
• 12+ years of professional experience, including 7+ years in IT Compliance, IT Risk, or Audit leadership roles.

Responsibilities

• Plan, schedule, and execute internal audits for SOC1, SOC2, and MAR.
• Coordinate audits across cloud platforms, identity systems, security tools, and enterprise applications.
• Validate remediation efforts and close audit findings.
• Prepare management dashboards, compliance reports, and KPI metrics for leadership reviews.

Skills

SOC1 audits

SOC2 audits

MAR audits

ITGC testing

control testing

stakeholder engagement

evidence inspection

remediation planning

audit readiness

communication skills

Education

Bachelor’s degree in Computer Science

Bachelor’s degree in Information Systems

Tools

AuditBoard

Job description

10+ years of experience with minimum 7+ years as an IT Compliance Manager

Technical Skills

• Strong capability to plan, schedule, and execute internal audits for SOC1, SOC2, and MAR, with deep expertise in ITGC and application control testing.
• Experienced in working with stakeholders across IT, business, and leadership to define scope, conduct walkthroughs, review controls, and ensure accurate interpretation of compliance requirements.
• Expert in assessing control design and operating effectiveness using walkthroughs, sampling, re-performance, and evidence inspection.
• Proficient in evaluating evidence quality, determining compliance status, identifying exceptions, and documenting clear, defensible audit conclusions.
• Skilled in recommending remediation actions and process improvements to strengthen control environments and align with SOC1, SOC2, and MAR expectations.
• Strong experience validating remediation efforts, confirming closure of audit findings, and driving year-round audit readiness.
• Adept in preparing teams for external audits by ensuring all evidence, artifacts, and documentation are complete, accurate, and audit-ready.
• Proficient with GRC platforms (e.g., AuditBoard) for managing control inventories, testing workflows, evidence repositories, and issue tracking.
• Effective at communicating audit results, control weaknesses, and readiness gaps to stakeholders in a clear and actionable manner.
• Capable of coordinating audits across diverse environments including cloud platforms, identity systems, security tools, and enterprise applications.
• Strong ability to manage multiple concurrent audit cycles while maintaining high quality and meeting strict deadlines.
• Practical experience integrating compliance requirements into operational processes and recommending enhancements that reduce long-term risk.

Process Skills

• Skilled in planning and executing quarterly compliance assessments and maintaining centralized evidence repositories for continuous audit readiness.
• Strong coordination capability for evidence collection and remediation updates across multiple teams and business units.
• Experienced in preparing management dashboards, compliance reports, and KPI metrics for leadership reviews.
• Proficient in issue management—logging, tracking, validating, and closing audit findings with full documentation.
• Experienced in governance cadence: scheduling review meetings, facilitating walkthroughs, and tracking remediation progress.
• Familiar with ITIL processes and integrating control requirements into operational workflows.
• Competent in using automation, templates, and accelerators to improve compliance efficiency and consistency.
• Strong understanding of IT security policies, procedures, and control design principles.

Behavioral Skills

• Strong interpersonal communication, collaboration, and team-building abilities.
• Solid analytical and decision-making skills.
• Ability to meet strict SLAs, maintain structure, and make informed technical decisions under pressure

Qualification

• Mandatory hands‑on experience executing SOC1, SOC2, and MAR audits.
• Bachelor’s degree in Computer Science, Information Systems, or equivalent experience.
• 12+ years of professional experience, including 7+ years in IT Compliance, IT Risk, or Audit leadership roles.