SOX & ITGC Tech Compliance Leader (Hybrid)

Altria Group, Inc.; Richmond (VA); Hybrid; USD 133,000 - 202,000; Full time

Benefits offered by this job

Hybrid work schedule

Competitive compensation

401(k) matching

Professional development stipends

Medical, dental, vision coverage

Job summary

Altria Group, Inc. in Richmond, VA is seeking a Senior Manager, Technology and Security Compliance to lead the SOX/ITGC program, strengthen controls around financial reporting, and guide a high-performing team across Technology and Cybersecurity.

This role requires deep SOX/ITGC expertise, CPA/CISA/CISSP, and the ability to present risk themes to senior leaders. Hybrid schedule in Richmond with potential for remote work for the ideal candidate.

Qualifications

• 10+ years of progressive experience in SOX compliance, ITGCs, IT audit, technology risk, internal audit, compliance, or related disciplines.
• 5+ years of leadership experience managing controls teams, audit programs, compliance programs, or multi-functional technology risk initiatives.
• Deep knowledge of SOX 404, ITGCs, automated controls, application controls, control dependency mapping, COSO, audit methodology, deficiency assessment, remediation governance, and management response development.
• Solid understanding of technology operations and security controls that underpin financial reporting, including IAM, PAM, user access reviews, leading system modifications, infrastructure operations, cloud environments, logging, monitoring, backups, and job scheduling.
• CISA, CISSP, CISM, CPA, CIA, or equivalent professional certification required; additional credentials such as CRMA, CGEIT, ISO 27001 Lead Auditor, or other relevant security, audit, risk, or governance certifications preferred.

Responsibilities

• Lead the SOX/ITGC controls team across the annual SOX lifecycle with clear roles, expectations, development plans, and accountability for quality execution.
• Oversee ITGC control design, control ownership alignment, evidence requirements, testing readiness, deficiency evaluation, issue remediation, management responses, and validation of corrective actions.
• Establish consistent standards, procedures, and quality expectations for control documentation, evidence collection, testing support, audit coordination, and remediation governance.
• Drive continuous improvement of the SOX/ITGC control environment through simplification, automation, control rationalization, stronger accountability, improved reporting, and risk-based prioritization.
• Coordinating SOX and ITGC activities across Technology, Cybersecurity, Finance, Internal Audit, External Audit, application owners, control owners, and business partners to maintain audit readiness and alignment.
• Guiding control owners in strengthening control design, clarifying operating expectations, improving evidence quality, identifying root causes, resolving recurring control gaps, and integrating controls with broader technology risk practices.
• Translating control risks, audit findings, remediation needs, testing status, control health, and readiness concerns into clear executive communications and decision points while presenting key risk themes to senior leaders and governance forums.

Skills

SOX/ITGC expertise

Leadership experience

Audit program management

Executive communication

Stakeholder management

Technology risk controls

Education

Bachelor’s degree in Accounting, Information Systems, Cybersecurity, Computer Science, Finance, or related field

Master’s degree preferred

Tools

CISA

CISSP

CISM

CPA

CIA

Job description

Altria Group, Inc. in Richmond, VA is seeking a Senior Manager, Technology and Security Compliance to lead the SOX/ITGC program, strengthen controls around financial reporting, and guide a high-performing team across Technology and Cybersecurity.

This role requires deep SOX/ITGC expertise, CPA/CISA/CISSP, and the ability to present risk themes to senior leaders. Hybrid schedule in Richmond with potential for remote work for the ideal candidate.