Remote Senior Director - IT Risk & SOX Compliance

Mcgraw Hill; Columbus (OH); On-site; USD 124,000 - 215,000; Full time

Benefits offered by this job

Annual bonus plan

Medical benefits

Job summary

McGraw Hill is seeking a Sr. Director, IT Internal Controls & Risk Compliance for the DES organization. You will own SOX compliance, design scalable IT controls, and lead governance across complex systems including Oracle ERP and SaaS environments.

Remote role nationwide in the United States, with responsibilities spanning risk assessment, control design, remediation, and coordination with internal and external auditors. Strong leadership and deep IT audit expertise are essential.

Qualifications

• 10+ years in IT audit, IT risk, or SOX compliance in a large corporate setting.
• Proven ability to plan and execute internal IT audits and SOX/Business audits.
• Experience supporting SOX implementations or major control transformations preferred.
• Experience working with PCAOB-regulated auditors.
• Advanced understanding of internal control frameworks and risk assessment.

Responsibilities

• Plan and develop audit scope for SOX and SOC2, from planning to reporting.
• Advise control owners on designing and implementing effective controls and remediation.
• Apply SOX, COSO, COBIT, and NIST concepts to identify control gaps and risks.
• Lead IT general controls evaluation—access, changes, and operations controls.
• Support enterprise IT risk management, policy development, and governance metrics.
• Coordinate with external auditors and cross-functional partners to drive efficiency.

Skills

IT Audit

SOX Compliance

Risk Management

Leadership

Stakeholder Management

Job description

McGraw Hill is seeking a Sr. Director, IT Internal Controls & Risk Compliance for the DES organization. You will own SOX compliance, design scalable IT controls, and lead governance across complex systems including Oracle ERP and SaaS environments.

Remote role nationwide in the United States, with responsibilities spanning risk assessment, control design, remediation, and coordination with internal and external auditors. Strong leadership and deep IT audit expertise are essential.