Manager, IT Enterprise Risk & Audit Strategy

We are working on a confidential search for a Manager / Lead-level Technology Risk & IT Transformation professional to join the internal risk and controls function of a well-established global technology company. The team is looking for someone polished, hands-on, and confident partnering across IT, Finance, Security, and business leadership. This is a great role for someone who enjoys bringing structure to complex technology initiatives, assessing risk, improving controls, and helping a company modernize its systems environment.

The position offers broad exposure across the business and will be involved in a major ERP transformation, SOX IT controls, cybersecurity process reviews, application access/security, data protection, AI governance, SDLC, vendor/advisory coordination, and broader technology risk projects. It should be a strong fit for someone coming from IT audit, technology risk, cyber GRC, ERP controls, Big 4/advisory, or corporate IT controls who wants to move into a broader, more strategic in-house platform.

Highlights

• Opportunity to help build and mature the technology risk function at a global public company, rather than simply inherit a fully established program.
• Major enterprise systems transformation underway, including a move from a legacy Oracle environment to Oracle Fusion.
• Responsibilities involve ITGCs, SOX controls, ERP implementation controls, application access/security, change management, data migration, testing, documentation, and control design.
• Exposure to cybersecurity governance, incident response processes, IAM, privileged access, backup/recovery, encryption, DLP, SIEM, endpoint protection, firewall governance, and third-party cyber services.
• Opportunity to work on newer technology risk areas, including AI governance, Microsoft 365 / cloud controls, Salesforce access and data security, SDLC, and audit/process modernization.
• Strong fit for a heavy Senior, Lead, light Manager, or hands-on Manager who wants a role with project variety, ownership, and future leadership potential.
• Certifications such as CISA, CIA, CISM, CISSP, CRISC, or similar are helpful but not required.
• Compensation is flexible based on level and experience, with potential to reach a strong all-in package for the right candidate.
• Excellent benefits, including medical, dental, vision, disability coverage, parental leave, life insurance, 401(k) match, employee stock purchase plan, educational assistance, PTO, holidays, and other voluntary benefits.