Senior Director, IT Risk & SOX Controls — Remote

Mcgraw Hill; New York (NY); On-site; USD 124,000 - 215,000; Full time

Job summary

McGraw Hill is seeking a Sr. Director, IT Internal Controls & Risk Compliance to lead SOX compliance and establish a scalable IT governance framework across the Digital Enterprise Solutions group.

You will design, test, and standardize controls for complex environments, including Oracle ERP and SaaS, while partnering with Finance, Internal Audit, and External Audit. The role requires deep IT audit expertise, strong leadership, and ability to drive risk management initiatives across a dynamic,

Qualifications

• 10+ years in IT audit, IT risk management, or SOX compliance in a complex corporate setting.
• Proven ability to plan and execute internal, SOX, operational, and IT audits.
• Experience supporting SOX implementations or major control transformations preferred.
• Experience collaborating with PCAOB-regulated auditors.

Responsibilities

• Audit planning, scope development, and end-to-end SOX/SOC2 engagements.
• Guide design and remediation of IT controls; support SOX readiness and implementations.
• Apply COSO/ COBIT/ NIST frameworks to identify control gaps and risks.
• Lead IT general controls initiatives including access provisioning, change management, and operations controls.
• Develop enterprise IT risk & compliance program and governance metrics.
• Coordinate with external auditors and internal stakeholders to optimize processes.

Skills

IT audit

SOX compliance

Risk assessment

Leadership

Stakeholder management

Communication

Tools

Audit management tools

COSO

COBIT/NIST

Job description

McGraw Hill is seeking a Sr. Director, IT Internal Controls & Risk Compliance to lead SOX compliance and establish a scalable IT governance framework across the Digital Enterprise Solutions group.

You will design, test, and standardize controls for complex environments, including Oracle ERP and SaaS, while partnering with Finance, Internal Audit, and External Audit. The role requires deep IT audit expertise, strong leadership, and ability to drive risk management initiatives across a dynamic,