Manager, IT Risk and Compliance

JOB OVERVIEW

The Manager – IT Risk and Compliance reports to the Executive Director - IT Risk & Compliance, and ensures that all IT operations, processes, and systems are compliant with industry standards and legal regulations. Utilizes a strong background in IT audit, risk, and compliance, with a focus on SOX compliance and operational information security audits. Conducts risk assessments, manages access to applications, and develops internal controls in coordination with the Executive Director, IT Risk & Compliance.

May lead or mentor IT professionals as the team structure evolves. Leverages a deep understanding of IT governance frameworks, data privacy laws, network security architecture, and business continuity planning.

• Ensure that all IT operations, processes, and systems comply with industry standards and legal regulations, including a focus on SOX compliance and operational information security audits.
• Conduct comprehensive risk assessments and manage the mitigation of identified risks to maintain the integrity and security of company IT infrastructure.
• Oversee access to all applications, ensuring that only authorized individuals have access to relevant data and systems.
• Develop and maintain robust internal controls, in coordination with the Executive Director, to safeguard the company’s digital assets and data.
• Develop and maintain IT policies and procedures, subject to Executive Director review and approval, to support the company’s operations and regulatory compliance.
• Conduct regular reviews of system access and IT controls to identify potential weaknesses and areas for improvement.
• May provide guidance and mentorship to IT risk and compliance staff as team responsibilities expand.
• Monitor regulatory changes and developments to ensure company practices remain in compliance, escalating findings and recommendations to the Executive Director, IT Risk & Compliance.
• Evaluate and recommend new technologies to improve compliance and risk management processes.
• Support and help implement programs/initiatives to enhance compliance awareness, contributing to continuous improvement of the Company’s Compliance and Risk Management programs under the direction of the Executive Director.
• Travel to various locations, both within our organization and externally, may be required depending on your role and responsibilities.
• Follows assigned work schedule with regular and predictable attendance.
• Performs other duties as assigned.

Over 6 years of experience in IT audit, risk, and compliance. Bachelor's degree in Information Technology, Computer Science, or a related field required. Advanced degrees or certifications in IT compliance or risk management are preferred. Proven experience in leading IT SOX compliance and operational information security audits. Strong understanding of industry standards and legal regulations related to IT and data compliance.

Excellent problem-solving skills and the ability to work under pressure. Strong communication skills and the ability to work effectively with both technical and non-technical staff.

Relevant certifications such as CISA, CRISC, CDPSE, and CISM from ISACA. SIE Certification Series 99 Series 7 preferred If you do not already have a Securities license relevant to your role at Innovayte, you may be required to take and pass the Securities Industries Essentials exam provided by FINRA. In addition, based on your role responsibilities, you may also be required to pass additional Securities Industry exams to allow you to operate in your role and be compliant with FINRA and the SEC requirements.

These licenses, when required, need to be obtained within certain specific time frames, typically 120…