$145,000–$175,000 Per Year
Accounting, Auditing, Business Processes, Change Management, Committee of Sponsoring Organizations of the Treadway Commission (COSO), Communication Skills, Computer Operations, Computer Science, Control Objectives for Information and related Technology (COBIT), Cross-Functional, Detail Oriented, Documentation, Emerging Technology, External Audit, Finance, ISO (International Organization for Standardization), IT Governance, Incident Response, Information Technology & Information Systems, Information Technology/Systems Audit, Information/Data Security (InfoSec), Internal Audit, Internet Security, Inventory Management, Leadership, Legal, Maintain Compliance, Management of Information Systems/Technology (MIS), Manufacturing, Policy Development, Policy Implementation, Privacy Controls, Privacy Regulations, Project/Program Management, Regulatory Compliance, Regulatory Requirements, Risk, Risk Analysis, Risk Management, Sarbanes-Oxley Act (SOX), Security Compliance, Standard Operating Procedures (SOP), Team Player, Technical Leadership, Testing, Time Management, U.S. National Institute of Standards and Technology (NIST)
Position: Senior Manager of IT Compliance
Supervisor: Sr Director, Office of the CIO
Location: Rosemont, IL
Description:
The Senior Manager of IT Compliance will play a key role in developing, implementing, and maintaining the company's IT governance, risk, and compliance (IT GRC) framework to support ongoing regulatory requirements. This position will oversee IT General Controls (ITGCs), data privacy compliance, risk assessments, and IT policy development to ensure the company's technology landscape aligns with SOX, GDPR, and other relevant standards.
This role will partner closely with IT, Finance, Legal, Internal Audit, and external advisors to manage IT risks and ensure the company is well-prepared for the control and compliance expectations of a public company.
Key Responsibilities
IT Governance & Controls
- Design, implement, and maintain effective IT General Controls (ITGCs) in alignment with SOX, COSO, and COBIT frameworks.
- Lead the IT Compliance function-ensuring systems, processes, and documentation meet audit and compliance requirements for a public company.
- Manage the ongoing monitoring and testing of IT controls and remediate deficiencies in collaboration with IT and business process owners.
- Establish and maintain a controls inventory, risk matrix, and documentation repository.
- Partner with Finance and Internal Audit to align IT controls with SOX compliance requirements.
- Support readiness assessments, audit walkthroughs, and control testing.
- Advise leadership on compliance risks and control maturity as part of ongoing governance.
Risk Management
- Conduct IT risk assessments and maintain an IT risk register, ensuring alignment with enterprise risk management (ERM) processes.
- Identify and evaluate emerging technology risks, including cybersecurity, data governance, and third-party vendor risks.
- Develop and track remediation plans to address gaps and ensure timely resolution.
Data Privacy & Security Compliance
- Partner with Legal, Security, and Data teams to maintain compliance with global data privacy regulations (GDPR, CCPA, etc.).
- Implement data handling policies, data classification standards, and retention requirements across systems.
- Support ongoing privacy audits and incident response processes.
Policy, Process, and Training
- Develop, implement, and maintain IT compliance policies and standard operating procedures.
- Drive awareness and training initiatives to build a culture of compliance and accountability across the IT organization.
- Prepare and present compliance reports to management, the Audit Committee, and external auditors.
Qualifications
Education & Experience
- Bachelor's degree in Information Systems, Computer Science, Accounting, or related field.
- 7-10 years of experience in IT audit, IT risk management, or IT compliance, preferably in a global, consumer goods, or manufacturing environment.
- Experience supporting SOX readiness or IPO transitions is strongly preferred.
- Knowledge of IT control frameworks (COBIT, COSO, NIST, ISO 27001) and privacy regulations (GDPR, CCPA, etc.).
Certifications (preferred):
- CISA, CISSP, CRISC, CISM, or equivalent certification(s).
Skills & Competencies
- Deep understanding of ITGCs across key domains (access management, change management, computer operations, program development).
- Strong project management and cross-functional collaboration skills.
- Excellent communication and stakeholder management abilities.
- Proactive, detail-oriented, and comfortable operating in a fast-paced, evolving environment.
Target Salary Range: $145,000 - $175,000 salary a year plus bonus. Exact pay will be based on factors including, but not limited to relevant education, qualifications, certifications, experience, level, geographic location, and business and organizational needs. Full-time positions are eligible for competitive benefits, including paid time off, health, dental, vision, life, disability benefits and 401(k).