Manager, Compliance Audit

Who We Are:

It’s pretty exciting, to find yourself standing in a pivotal moment in time. It’s even more exciting to be out front leading it. At QTS, our world‑class data centers are supporting our customers most strategic growth initiatives, positioning us at the forefront of today’s dynamic digital transformation.

As AI and cloud drive the demand for increased speed, capacity and capability, QTS has emerged as the global digital infrastructure leader, committed to connecting the world for good. Driven by purpose and fueled by a spirit of innovation, QTS designs, builds and operates some of the world’s most advanced, forward‑thinking data centers. QTS is a portfolio company of Blackstone.

QTS is Powered by People
. People who play a vital role in our company’s culture, innovation and growth. People who are committed to contributing to the communities where we operate and work. People who are knowledgeable, resourceful and mission driven. Together, we do great things!!

The Manager, Compliance Audits reports directly to the Director, Technology and Compliance Audits and plays an integral role on the QTS Audit Services team by overseeing the annual cycle of compliance audits. The position is based in Overland Park, KS and travels to QTS data center locations as required to deliver and continually improve an existing compliance audit program which covers standards such as SSAE 18 (SOC1 and SOC2 reports), ISO
27001, ISO
22301, HITRUST, PCI DSS, SOX IT General Controls (ITGCs), and others. Responsibilities include third‑party contracting (reviewing statements of work, managing purchase requisitions, etc.), oversight and coordination of external audit firm(s), project management, documentation request administration, controls testing and review, communication and status reporting, issue vetting, report/deliverable review, and others as needed. In this role, you will have high visibility to business leaders across the company as you partner with them to understand current and changing processes/controls, advise on compliance audit program updates (new standards, scope changes, improvement opportunities, etc.),

and ensure compliance audit reports are delivered on time to our customers.

• Manage and complete the scoping, planning, testing and reporting phases of the annual compliance audit program under the direction of Audit Services department leadership, while liaising with external audit firm(s) to deliver quality results on time and within budget.
• Review the work of team members, offer suggestions for improvement, and provide them on‑the‑job coaching.
• Monitor the status of new data center builds, lead compliance readiness sessions for new sites, and collaborate with external audit firm(s) to include new data centers into the audit scope.
• Develop and sustain strong relationships with stakeholders at all levels throughout the company to identify, understand and maintain awareness of key business risks, process changes, and related mitigating controls.
• Prepare and participate in interviews of process owners and stakeholders.
• Review and/or perform testing to evaluate the effectiveness of key controls, summarize test results, and develop practical recommendations for any audit findings.
• Monitor the completion of corrective action plans and verify whether they adequately address the related audit finding.
• Foster continuous improvement by challenging existing processes, strengthening controls, and identifying efficiencies in the compliance audit program.
• Participate in the IT Risk Assessment activities and development of the annual IT audit plan.
• Assist other Audit Services team members with other audits or related activities as needed.

• Bachelor’s degree, preferably in Management Information Systems, Cybersecurity, Business, Finance or Accounting
• Five or more years of performing or overseeing compliance audits, preferably within a capital‑intensive and/or technology industry
• Two or more years of relevant experience specific to Compliance Frameworks, including one or more of the following: SOC1 and SOC2, ISO
  27001, ISO
  22301, HITRUST, PCI DSS, NIST (800 series,…