Sr. Manager, IT Governance, Risk, and Compliance

Trinity Structural Towers; Dallas (TX); On-site; USD 130,000 - 180,000; Full time

Job summary

Trinity Industries seeks a Sr. Manager of IT Governance, Risk, and Compliance to lead ITGC design, SOX compliance, and audit relationships from our Dallas headquarters. You will partner with IT leadership to strengthen controls and risk management across the IT landscape.

The role drives TICAP program, delivers training, and serves as SME for IT compliance, aligning controls with regulatory expectations while coordinating with internal and external auditors.

Qualifications

• Bachelor’s degree or technical degree required; relevant certifications or training considered.
• 5–7 years IT audit/compliance, risk assurance, IT advisory, or internal audit experience.
• At least 3 years leading a team.
• Deep understanding of IT general controls (ITGCs), SOX compliance requirements, control design principles, and audit lifecycle.
• Certifications in ITIL, ISO 27000, COBIT, CISSP, SANS, CISA, Security+, or CMMC desired.

Responsibilities

• Lead ITGC control design activities including alignment, procedure customization, and annual control rationalization to identify gaps and remove unnecessary controls.
• Manage IT process and control documentation including risk control matrices, process flowcharts, and control procedures to support SOX regulatory requirements and internal policy compliance.
• Act as the primary SME for IT and business leaders on IT compliance, SOX requirements, and cyber/technology risk, advising on control expectations and regulatory impacts of changes.
• Own the rollout and ongoing maintenance of the Trinity IT Compliance Assessment Program (TICAP), including scheduling assessments, coordinating with control owners, tracking results, and reporting outcomes to leadership.
• Own the SOX compliance training program, including creation and annual update of regulatory awareness, framework awareness, control owner awareness, and control procedure training packages; coordinate with HR for publishing and distribution, and manage the control awareness attestation process.
• Serve as the primary liaison between IT and internal/external audit resources, coordinating on SOX ITGC, SOC 1, and SOC 2 engagements; coordinate evidence requests and manage issue mitigation and remediation tracking.
• Oversee ongoing ITGC monitoring and execution, including weekly metrics and remediation status reporting; conduct ad-hoc assessments to identify issues before audits.

Skills

ITGCs

SOX

Audit lifecycle

Risk assessment

Regulatory compliance

Leadership

Stakeholder communication

Control design

Education

Bachelor’s or technical degree

Job description

Sr. Manager, IT Governance, Risk, and Compliance

Delivering Goods For The Good Of All™ - TrinityRail

While TrinityRail has built one of the broadest and deepest railcar platforms in the world, it’s what’s inside our cars that counts. We are proud to manufacture, maintain, and manage the railcars that deliver the indispensable goods that keep our lives, and our economy, rolling. “Delivering Goods For The Good Of All” is why we proudly come to work each day, and this is why our company exists. This is our purpose. TrinityRail provides- Railcar Manufacturing: https://www.trinityrail.com/products/ - Railcar Leasing Solutions: https://www.trinityrail.com/leasing/ - Railcar Maintenance & Parts: https://www.trinityrail.com/maintenance/ - Fleet Management Services: https://www.trinityrail.com/fleet-management/For more information, visit us at trinityrail.com.Learn more about Trinsight®: https://www.trinityrail.com/trinsight/Trinsight is TrinityRail 's cloud-based platform purpose-built to bring your fleet into focus, allowing you to transform and streamline your supply chain with real-time tracking, analysis and management features that modern logistics demandsVideo tranFor decades, TrinityRail has been delivering the goods that keep North America moving. A humble promise to transport the everyday things that make everybody's lives better. It's our commitment to being stewards of the supply chain connecting companies with customers. People with products and Delivering Goods for the Good of All. While we've built one of the broadest and deepest railcar platforms in the world, to us it's what's on the inside that counts. And the purpose these products serve for you like grain the secret ingredient for making memories, or gravel that paves the way for a getaway, fuel to power the road trip of a lifetime, cars that transport us to exciting new places, and essential chemicals that purify our water food and promote a healthy way of life. Indispensable goods that truly move us and keep our lives, and our economy rolling. TrinityRail is proud to

Trinity Industries is seeking a Senior Manager of IT Governance, Risk, and Compliance (IT GRC) for our headquarters office in Dallas, TX. This position functions within the Information GRC (IGRC) team, reporting to the Senior Director of IGRC within the Information Risk Management (IRM) organization. IRM sits within the Legal organization under the Chief Information Security Officer (CISO) and Chief Privacy Officer (CPO) and provides information compliance program services to the IT organization. This role leads IT General Controls (ITGC) control design and oversight, compliance program execution, and audit relationship management across internal audit, external audit, and SOC engagements, partnering closely with IT leadership, the Chief Audit Executive, the Chief Information Officer, and the Chief Information Security Officer.

What you will do:

• Lead ITGC control design activities including alignment, procedure customization, and verification, as well as annual control rationalization to identify gaps and eliminate redundant or unnecessary controls.
• Manage IT process and control documentation including risk control matrices, process flowcharts, and control procedures to support SOX regulatory requirements and internal policy compliance.
• Act as the primary Subject Matter Expert (SME) for IT and business leaders on IT compliance, SOX requirements, and cyber and technology risk, advising on control expectations and the regulatory impact of changes to applications and infrastructure.
• Own the rollout and ongoing maintenance of the Trinity IT Compliance Assessment Program (TICAP), including scheduling assessments, coordinating with control owners, tracking results, and reporting outcomes to leadership.
• Own the SOX compliance training program, including the creation and annual update of regulatory awareness, framework awareness, control owner awareness, and control procedure training packages. Coordinate with HR on publishing and distribution, and manage the control awareness attestation process.
• Serve as the primary liaison between the IT organization and all internal and external audit resources, coordinating on behalf of IT across SOX ITGC, SOC 1, and SOC 2 audit engagements. Coordinate evidence requests for Test of Design and Test of Effectiveness, manage issue mitigation and remediation tracking, and provide audit status reporting to leadership.
• Oversee ongoing ITGC monitoring and execution performance, including weekly metrics and remediation status reporting. Conduct ad-hoc and requested execution assessments to identify issues prior to audit.

Managerial Responsibilities

• Manage the daily activities of IT GRC Specialist(s), including performance reviews, time sheet approvals, goal setting, professional development, and prioritization of team tasks and projects in alignment with organizational objectives.
• Provide mentorship and guidance to team members, assisting in their career growth and skill development.
• Act as a point of escalation for complex issues or challenges faced by the team.

What you will need:

• Bachelor’s or technical degree preferred (Computer Science, Information Systems, Business Administration, or related field). Industry equivalent experience combined with relevant certifications or specialized training will be considered.
• Minimum of five to seven years of IT audit/compliance, risk assurance, IT advisory, or internal audit experience, including at least three years of experience leading a team.
• Deep understanding of IT general controls (ITGCs), SOX compliance requirements, control design principles, and the audit lifecycle, including Test of Design and Test of Effectiveness. Familiarity with infrastructure, SDLC, and IT service management in complex enterprise environments.
• Certification in one or more of the following is desired: ITIL, ISO 27000, COBIT, CISSP, SANS, CISA, Security+, CMMC

EOE

Trinity Industries, Inc., and its subsidiary or affiliated companies (hereinafter “Trinity”) are committed to equal employment opportunity. It is our policy to consider candidates for employment without regard to race, color, sex, sexual orientation, gender identity, religion, age, national origin, disability, or veteran status.

View the following posters by clicking the links below:

Trinity participates in E-Verify and will provide the federal government with your Form I-9 information to confirm that you are authorized to work in the U.S.

View the following poster by clicking the link below:

Trinity is committed to working with and providing reasonable accommodations to individuals with disabilities. If you need a reasonable accommodation because of a disability for any part of the employment process, please send an e-mail to [e-mail] . This email address should only be used for accommodations and not general inquiries or resume submittals.