ITS Compliance Manager

Accountable for leading the daily operations of the Compliance and Change Control areas within ITS. Oversees ongoing IT SOX and audit compliance execution including improvement of processes and procedures to ensure ongoing compliance; executing decisions, scoping, planning, and testing. Responsible for adherence to and compliance with findings from audits by internal and external auditors and SOX risk management. Serves as the principal IT contact in managing and supporting the IT control environment. Accountable for all issues related to ITS-specific policies, procedures and standards; disaster recovery and business continuity; and, compliance monitoring and testing. Responsible for production migration, change control activities, quality assurance, configuration management, and management of the work acceptance process within ITS.Responsible for managing the ITS team of Compliance, Change Management, Disaster Recovery, and Policy and Procedures Documentation specialists. Responsible for leading the ITS SOX Compliance Program in the monitoring, evaluation, testing and improvement initiation of program activities. Develops SOX and audit testing strategies and processes and facilitates testing and follow-up with ITS management to facilitate compliance .Analyzes self-assessment results for process improvement opportunities, and/or remediation and regularly reports efforts. Continually enhances the efficiency of SOX and audit by reviewing KCA's and CA's to ensure appropriate control designations as related to financial and non-financial controls and processes. Establishes processes to ensure that SOX compliance is always considered when making changes or implementing applications or enhancements. Ensures that all groups adhere to the ITS policies and procedures .Implements the ongoing evolution of SOX from a project to an ongoing and imbedded program; from reactively fixing problems to proactively preventing problems . Participates in compliance reviews/audits with both internal and external auditors and drives remediation of and/or response to audit findings and control deficiencies. Coordinates with ITS directors to establish and publish policies, procedures and standardized practices and ensures that ITS staff receives appropriate training. Oversees approval, communication, revision and annual review of these policies, procedures and standardized practices. Coordinates development of reviews and maintains and publishes resource classifications as related to access management.Provides strong central oversight to guarantee consistency and quality. Coordinates development of and maintains effective disaster recovery plans, processes and procedures, and manages ITS testing of plans. Represents ITS on the Corporate Crisis Management team. Responsible for production migration and activities leading up to migration including change control and quality assurance.
REQUIREMENTS
Requires: BA/BS degree or higher in Accounting, Information Systems or related disciplines. Progressively more responsible positions in IT technology and process audits and SOX compliance testing and documentation standards. Proven ability to lead and perform IT internal control assessments and remediation activities. 7 plus years of experience in IT Information Security and audit functions. 5 plus years of experience in managing an ITS team of professionals. Demonstrated compliance expertise with at least 2 years hands on experience in leading an IT compliance environment. Working knowledge of accounting and financial systems. Attention to detail. Action and results oriented with the ability to get things done and overcome obstacles. Excellent project management skills. Excellent communication skills.