Sr. Manager, IT Governance, Risk, and Compliance

Sr. Manager, IT Governance, Risk, and Compliance

Delivering Goods For The Good Of All™ - Trinity Rail

While Trinity Rail has built one of the broadest and deepest railcar platforms in the world, it’s what’s inside our cars that counts. We are proud to manufacture, maintain, and manage the railcars that deliver the indispensable goods that keep our lives, and our economy, rolling. “Delivering Goods For The Good Of All” is why we proudly come to work each day, and this is why our company exists.

This is our purpose. Trinity Rail provides
- Railcar Manufacturing:  - Railcar Leasing Solutions:  - Railcar Maintenance & Parts:  - Fleet Management Services:  more information, visit us at  more about Trinsight®:  is Trinity Rail 's cloud-based platform purpose-built to bring your fleet into focus, allowing you to transform and streamline your supply chain with real-time tracking, analysis and management features that modern logistics demands

Video tran

For decades, Trinity Rail has been delivering the goods that keep North America moving. A humble promise to transport the everyday things that make everybody's lives better. It's our commitment to being stewards of the supply chain connecting companies with customers. People with products and Delivering Goods for the Good of All. While we've built one of the broadest and deepest railcar platforms in the world, to us it's what's on the inside that counts.

And the purpose these products serve for you like grain the secret ingredient for making memories, or gravel that paves the way for a getaway, fuel to power the road trip of a lifetime, cars that transport us to exciting new places, and essential chemicals that purify our water food and promote a healthy way of life. Indispensable goods that truly move us and keep our lives, and our economy rolling.

Trinity Rail is proud to

Trinity Industries is seeking a Senior Manager of IT Governance, Risk, and Compliance (IT GRC) for our headquarters office in Dallas, TX. This position functions within the Information GRC (IGRC) team, reporting to the Senior Director of IGRC within the Information Risk Management (IRM) organization. IRM sits within the Legal organization under the Chief Information Security Officer (CISO) and Chief Privacy Officer (CPO) and provides information compliance program services to the IT organization.

This role leads IT General Controls (ITGC) control design and oversight, compliance program execution, and audit relationship management across internal audit, external audit, and SOC engagements, partnering closely with IT leadership, the Chief Audit Executive, the Chief Information Officer, and the Chief Information Security Officer.

What you will do:

• Lead ITGC control design activities including alignment, procedure customization, and verification, as well as annual control rationalization to identify gaps and eliminate redundant or unnecessary controls.
• Manage IT process and control documentation including risk control matrices, process flowcharts, and control procedures to support SOX regulatory requirements and internal policy compliance.
• Act as the primary Subject Matter Expert (SME) for IT and business leaders on IT compliance, SOX requirements, and cyber and technology risk, advising on control expectations and the regulatory impact of changes to applications and infrastructure.
• Own the rollout and ongoing maintenance of the Trinity IT Compliance Assessment Program (TICAP), including scheduling assessments, coordinating with control owners, tracking results, and reporting outcomes to leadership.
• Own the SOX compliance training program, including the creation and annual update of regulatory awareness, framework awareness, control owner awareness, and control procedure training packages. Coordinate with HR on publishing and distribution, and manage the control awareness attestation process.
• Serve as the primary liaison between the IT organization and all internal and external audit resources, coordinating on behalf of IT across SOX ITGC, SOC 1, and SOC 2 audit engagements. Coordinate evidence requests for Test of Design and Test of Effectiveness, manage issue mitigation and remediation…