Senior IT GRC Manager — SOX/ICFR (Remote)

RGP; Richmond (VA); On-site; USD 134,000 - 168,000; Full time

Job summary

RGP is seeking a Manager, IT Governance, Risk & Compliance to execute and govern the enterprise GRC program with a primary focus on SOX ITGCs, ITACs, and ICFR. This is a fully remote role with base compensation between $134,400 and $168,000 annually.

You will lead the control framework, SOX program, ITGC/ITAC testing, audit coordination, remediation, privacy program support, and governance across distributed teams, ensuring alignment with COBIT, COSO, NIST CSF, and ISO 27001.

Qualifications

• Bachelor's degree in MIS, CS, Info Security, Accounting, or related field.
• 6+ years in IT Audit/GRC/InfoSec with 2+ in senior lead SOX.
• Experience with ITGC/ITAC testing and ICFR evidence preparation.
• Certifications: CRISC/CISM preferred; CISA/CIA/CISSP also accepted.

Responsibilities

• Maintain the enterprise IT control framework and conduct ITGC/ITAC scoping.
• Manage end-to-end SOX IT compliance calendar and testing approach.
• Oversee ITGC/ITAC testing across Access Controls, Change Management, and SDLC.
• Coordinate audit evidence packages and prepare IT control reporting.
• Provide governance for offshore/international and co-source resources.

Skills

6+ years IT Audit/GRC/InfoSec

SOX 404 experience

Technical oversight for distributed资源

Education

Bachelor's degree in MIS/CS/Info Security/Accounting

Tools

ERP systems testing

Cloud identity providers (Entra ID, Okta)

PAM tools

CI/CD pipelines

SQL Server / Oracle databases

Job description

RGP is seeking a Manager, IT Governance, Risk & Compliance to execute and govern the enterprise GRC program with a primary focus on SOX ITGCs, ITACs, and ICFR. This is a fully remote role with base compensation between $134,400 and $168,000 annually.

You will lead the control framework, SOX program, ITGC/ITAC testing, audit coordination, remediation, privacy program support, and governance across distributed teams, ensuring alignment with COBIT, COSO, NIST CSF, and ISO 27001.