Senior IT GRC Director — Governance & Compliance

Commercial Metals; Irving (TX); On-site; USD 150,000 - 210,000; Full time

Benefits offered by this job

Day 1 Benefits Coverage with low cost

401(k) company match

Bonuses

Life and Disability Insurance

Employee Stock Purchase Plan

Training and Advancement Opportunities

Job summary

Commercial Metals seeks a senior IT risk and governance leader to advance our IT GRC program. You will drive SOX scope, controls, and remediation, working with Internal Audit, Finance, Cybersecurity, and process owners across the enterprise.

You will lead governance design, control testing, and readiness, with emphasis on SAP GRC, ITGC, and risk-based remediation. Strong communication with executives and auditors is essential.

Qualifications

• Proven experience leading IT audit, technology risk, governance, or risk teams in a large enterprise.

Responsibilities

• Lead the maturation of CMC's IT Governance, Risk & Compliance program and define future maturity phases.
• Establish consistent governance standards, accountability models, decision rights, and control ownership.
• Strengthen control design, policy management, compliance monitoring, and artifacts.
• Drive alignment of business objectives, technology strategy, compliance, and risk priorities.
• Promote accountability and continuous improvement with compliance integrated into delivery.
• Serve as IT leadership interface for Internal Audit, external auditors, and stakeholders.
• Improve audit readiness through standardized evidence management, remediation governance, and closure criteria.
• Partner with IT, Finance, and business leaders to address audit findings and reduce deficiencies.
• Provide executive insight on governance maturity, control effectiveness, and remediation aging.
• Ensure compliance activities improve operations and not just satisfy audits.

Skills

IT Audit

Technology Risk

Governance

Compliance

SOX ITGC

Stakeholder Mgmt

Audit Leadership

Cybersecurity Assurance

Education

Bachelor's in Information Systems

MBA preferred

CISA certification preferred

Tools

SAP GRC

ServiceNow GRC/IRM

Workiva

Archer

MetricStream

SAP S/4HANA

Job description

Commercial Metals seeks a senior IT risk and governance leader to advance our IT GRC program. You will drive SOX scope, controls, and remediation, working with Internal Audit, Finance, Cybersecurity, and process owners across the enterprise.

You will lead governance design, control testing, and readiness, with emphasis on SAP GRC, ITGC, and risk-based remediation. Strong communication with executives and auditors is essential.