Director, Technology SOX Controls & Compliance

Are you an accomplished technology risk, security, and compliance leader ready to shape how a major enterprise protects the integrity of its financial reporting and technology environment? Join us as Director, Technology SOX Controls and Compliance , where you’ll set the vision for a modern, risk-based controls program and lead the strategy, governance, and evolution of our Sarbanes-Oxley (SOX), IT General Controls (ITGC), and technology security compliance programs. You’ll have the opportunity to influence enterprise risk strategy, strengthen critical technology controls, and advance how emerging technologies such as cloud, automation, and artificial intelligence are governed across the organization. This position is in Richmond, VA with a hybrid work schedule. We will consider a remote working option for the ideal applicant. In this newly built position, you’ll guide and develop the individual responsible for Technology and Security Compliance at the senior manager level and their team. You will also serve as a trusted advisor to senior leaders, Internal Audit, External Audit, and key business and technology collaborators. You’ll bring deep SOX and ITGC expertise, broad technology risk and security knowledge, and the executive presence to drive a forward-looking compliance strategy across a sophisticated enterprise environment. What you will be doing:

• Setting the strategy, multi-year roadmap, and operating model for enterprise SOX, ITGC, and technology compliance programs, aligning controls with business priorities, regulatory expectations, and the enterprise risk management framework.
• Leading, coaching, and developing the Senior Manager, Technology and Security Compliance and the broader controls team, building succession depth, strengthening accountability, and fostering a high-performing, continuous-learning culture.
• Providing executive oversight across the full annual SOX lifecycle, including scoping, risk assessment, control design, testing readiness, deficiency evaluation, remediation, and management certification, while ensuring timely and high-quality outcomes.
• Serving as the primary technology compliance liaison to External Audit, Internal Audit, the Disclosure Committee, and other governance forums, presenting control health, key risk themes, and deficiency assessments to senior leaders and, as needed, the Audit Committee.
• Fostering compliance modernization through continuous controls monitoring, GRC automation, data analytics, and the responsible use of artificial intelligence to improve control effectiveness, efficiency, and transparency.
• Assessing the control and compliance implications of emerging technologies, including AI and machine learning, generative AI, cloud and SaaS platforms, robotic process automation, and modern DevOps and CI/CD pipelines, embedding appropriate governance and risk treatment from the start.
• Aligning technology compliance with security and governance frameworks, including NIST CSF, ISO 27001, COBIT, CIS Controls, NIST AI RMF, and ISO/IEC 42001, while driving control rationalization across Technology, Cybersecurity, Finance, business operations, transformation programs, M&A, and third-party relationships.
• Supervising technology safeguards that support financial reporting, including identity and privileged access management, user access reviews, updates coordination, infrastructure and cloud operations, job scheduling, backups, logging, and monitoring, while establishing executive reporting, program metrics, budgets, resourcing, and external partner governance.

• Bachelor’s degree in Accounting, Information Systems, Cybersecurity, Computer Science, Finance, or a related field; Master’s degree, such as an MBA or MS in Information Systems or Cybersecurity, strongly preferred.
• 15+ years of dynamic experience across SOX compliance, ITGCs, IT audit, technology risk, information security, internal audit, or related disciplines, including considerable experience leading SOX/ITGC programs within a Fortune 500 or comparably sized public company.
• 8+ years of people leadership experience, including leading leaders, building and scaling controls or audit teams, leading budgets and external partners, and operating within a complex global or multinational organization; Big Four or public accounting audit experience is a plus.
• Expert knowledge of SOX 302/404, PCAOB auditing standards, ITGCs, automated and application controls, IT-dependent manual controls, control dependency mapping, COSO 2013, deficiency evaluation and aggregation, remediation governance, and management response development.
• Proven command of technology operations and security controls related to financial reporting, covering IAM, PAM, user access reviews, change management, infrastructure operations, AWS, Azure or GCP cloud environments, SaaS and ERP platforms such as SAP, Oracle, and Workday, logging, monitoring, backups, and job scheduling.
• Solid understanding of security and governance frameworks, including NIST CSF, ISO 27001, COBIT, and CIS Controls, along with familiarity with SOC 1/SOC 2 reporting, third-party risk management, and emerging AI governance frameworks.
• Demonstrated experience modernizing compliance programs through automation, continuous controls monitoring, GRC platforms such as ServiceNow IRM, AuditBoard, or OneTrust, and data analytics, with a strong perspective on governing artificial intelligence and other emerging technologies.
• Validated executive presence and ability to influence C-suite leaders, Audit Committee members, and external auditors, combined with audit/risk certification such as CISA, CPA, CIA, CRISC, or CRMA and security certification such as: CISSP, CISM, or CCSP; additional credentials such as CGEIT, ISO 27001 Lead Auditor, CCSK, IAPP AIGP, or ISACA AAIA preferred.