Senior Manager of IT Compliance

Job Description

Job Description

Position: Senior Manager of IT Compliance

Supervisor: Sr Director, Office of the CIO

Location: Rosemont, IL

Description:

The Senior Manager of IT Compliance will play a key role in developing, implementing, and maintaining the company’s IT governance, risk, and compliance (IT GRC) framework to support ongoing regulatory requirements. This position will oversee IT General Controls (ITGCs), data privacy compliance, risk assessments, and IT policy development to ensure the company’s technology landscape aligns with SOX, GDPR, and other relevant standards.

This role will partner closely with IT, Finance, Legal, Internal Audit, and external advisors to manage IT risks and ensure the company is well-prepared for the control and compliance expectations of a public company.

Key Responsibilities

IT Governance & Controls

• Design, implement, and maintain effective IT General Controls (ITGCs) in alignment with SOX, COSO, and COBIT frameworks.
• Lead the IT Compliance function—ensuring systems, processes, and documentation meet audit and compliance requirements for a public company.
• Manage the ongoing monitoring and testing of IT controls and remediate deficiencies in collaboration with IT and business process owners.
• Establish and maintain a controls inventory, risk matrix, and documentation repository.

• Partner with Finance and Internal Audit to align IT controls with SOX compliance requirements.
• Support readiness assessments, audit walkthroughs, and control testing.
• Advise leadership on compliance risks and control maturity as part of ongoing governance.

Risk Management

• Conduct IT risk assessments and maintain an IT risk register, ensuring alignment with enterprise risk management (ERM) processes.
• Identify and evaluate emerging technology risks, including cybersecurity, data governance, and third-party vendor risks.
• Develop and track remediation plans to address gaps and ensure timely resolution.

Data Privacy & Security Compliance

• Partner with Legal, Security, and Data teams to maintain compliance with global data privacy regulations (GDPR, CCPA, etc.).
• Implement data handling policies, data classification standards, and retention requirements across systems.
• Support ongoing privacy audits and incident response processes.

Policy, Process, and Training

• Develop, implement, and maintain IT compliance policies and standard operating procedures.
• Drive awareness and training initiatives to build a culture of compliance and accountability across the IT organization.
• Prepare and present compliance reports to management, the Audit Committee, and external auditors.

Qualifications

Education & Experience

• Bachelor’s degree in Information Systems, Computer Science, Accounting, or related field.
• 7–10 years of experience in IT audit, IT risk management, or IT compliance, preferably in a global, consumer goods, or manufacturing environment.
• Experience supporting SOX readiness or IPO transitions is strongly preferred.
• Knowledge of IT control frameworks (COBIT, COSO, NIST, ISO 27001) and privacy regulations (GDPR, CCPA, etc.).

Certifications (preferred):

• CISA, CISSP, CRISC, CISM, or equivalent certification(s).

Skills & Competencies

• Deep understanding of ITGCs across key domains (access management, change management, computer operations, program development).
• Strong project management and cross-functional collaboration skills.
• Excellent communication and stakeholder management abilities.
• Proactive, detail-oriented, and comfortable operating in a fast-paced, evolving environment.

Target Salary Range: $145,000 - $175,000 salary a year plus bonus. Exact pay will be based on factors including, but not limited to relevant education, qualifications, certifications, experience, level, geographic location, and business and organizational needs. Full-time positions are eligible for competitive benefits, including paid time off, health, dental, vision, life, disability benefits and 401(k).