Sr. Manager of Information Risk and Controls

Tier4 Group; Atlanta (GA); Hybrid; USD 90,000 - 120,000; Full time

Job summary

Tier4 Group in Midtown Atlanta, GA seeks an experienced IT Controls Manager for a 12-month contract in a hybrid role (3 days onsite / 2 days remote). The candidate will design, implement, and test IT controls to ensure regulatory compliance and strong control execution.

Responsibilities include designing ITGCs, testing plans, remediation of gaps, and collaborating with IT, Risk, and Internal Audit.Required are 5+ years in IT controls, IT audit, or IT risk, and knowledge of major frameworks;

Qualifications

• 510 years of experience in IT controls, IT audit, or IT risk.
• Strong hands‑on experience with IT control testing and evaluation.
• Knowledge of ITGCs and control frameworks (e.g., SOX, NIST, COBIT, COSO, FFIEC).
• Experience supporting audits and working with auditors.
• Strong communication and organizational skills.

Responsibilities

• Design and maintain IT general controls (ITGCs), including access, change management, and system operations.
• Develop and execute IT control testing plans, including scheduling, documentation, and evidence review.
• Evaluate control effectiveness, identify gaps, and drive remediation with control owners.
• Support IT risk assessments by identifying and addressing control weaknesses.
• Partner with IT teams, Risk, and Internal Audit to strengthen the overall control environment.
• Track control deficiencies and ensure timely resolution.

Skills

IT controls

IT audit

IT risk

ITGCs knowledge

Communication skills

Organizational skills

Stakeholder management

Education

Bachelor's degree

MBA or Master's degree preferred

Tools

IT control frameworks

Job description

IT Controls Manager

12 Month Contract
Midtown Atlanta, GA
Hybrid - 3 days onsite / 2 days remote

We are seeking an experienced IT Controls Manager to strengthen and maintain our IT control environment. This role focuses on the design, implementation, and testing of IT controls, working closely with IT and risk partners to ensure effective control execution and regulatory compliance.

Key Responsibilities

• Design and maintain IT general controls (ITGCs), including access, change management, and system operations
• Develop and execute IT control testing plans, including scheduling, documentation, and evidence review
• Evaluate control effectiveness, identify gaps, and drive remediation with control owners
• Support IT risk assessments by identifying and addressing control weaknesses
• Partner with IT teams, Risk, and Internal Audit to strengthen the overall control environment
• Track control deficiencies and ensure timely resolution

Requirements

• 510 years of experience in IT controls, IT audit, or IT risk
• Strong hands‑on experience with IT control testing and evaluation
• Knowledge of ITGCs and control frameworks (e.g., SOX, NIST, COBIT, COSO, FFIEC)
• Experience supporting audits and working with auditors
• Strong communication and organizational skills

Framework & Regulatory Knowledge

• Familiarity with frameworks such as FFIEC, NIST CSF, COBIT, COSO, ISO 27001, and FHFA supervisory guidance.
• Hands‑on experience designing and implementing risk and control frameworks.

Skills & Capabilities

• Excellent communication skills, with the ability to influence, build consensus, and present data‑driven insights.
• Strong analytical and problem‑solving abilities; able to identify patterns, investigate root causes, and recommend solutions.
• Comfortable working in a complex, matrixed environment with varied stakeholders.
• Team‑oriented leadership style with the confidence to navigate challenging situations diplomatically.

Preferred Background

• Experience in asset management or broader financial services.
• Bachelors degree required; MBA or masters degree preferred.
• CRISC, CISSP, CISA, CISM, CIPP, or related certifications.