IT Manager - SOX Audit & Compliance

Career Opportunities: IT Manager - SOX Audit & Compliance (525836)

Ash Grove family of companies is one of North America’s leading cement manufacturers, with a legacy of innovation and excellence dating back to 1882. The company operates 12 world-class cement plants and a vast network of 41 terminals across the United States and Canada. Renowned for its forward-thinking approach, Ash Grove combines technical expertise, robust safety standards, and empowered talent to deliver high performance and better serve our customers.

At Ash Grove, we stand together to reinvent the way our world is built.

At Ash Grove Cement, people are our first priority. We offer a complete benefits package to include:

Company Benefits:

• Family Culture – We treat our team like family
• Generous Paid Time Off
• 11 Paid Holidays per year
• 401k with 5% company match & profit sharing
• Opportunities for Internal Mobility
• Professional Development Opportunities
• Training Provided
• Tuition Reimbursement Program - We'll assist with continuing education that aligns with your career goals
• Employee Assistance Program
• Company Paid Life Insurance
• Short- & Long-Term Disability
• Company Discounts on products, goods, services, electronics, automotive, travel & more!
• Opportunities for Community Engagement
• Potential Relocation Packages

Summary:

The IT Manager - SOX, Audit, and Compliance designs, implements, and oversees the ongoing operating effectiveness of the company’s IT compliance program. The position leads all IT Sarbanes‑Oxley (SOX) compliance activities, manages the full IT audit lifecycle for internal and external audits, and drives continuous improvement of IT General Controls (ITGCs) and IT Application Controls (ITACs) across the enterprise. This position serves as the primary liaison between IT, internal audit, external auditors, finance, and business stakeholders — ensuring the organization maintains the highest standards of data integrity, financial compliance, and IT control.

The IT Manager - SOX, Audit and Compliance position also provides proactive advisory support on control design for new system implementations, ERP changes, and cloud migrations, embedding compliance‑by‑design across the technology landscape.

What you’ll be contributing:

• Promote and follow all plant safety guidelines.
• Own and manage the end-to-end IT SOX compliance program, including annual risk assessments, scoping, control mapping, and documentation of Risk and Control Matrices (RCMs) and process narratives for all in-scope systems
• Identify, assess, and test IT General Controls (ITGCs) covering logical access, change management, computer operations, and data backup/recovery across complex ERP and business-critical applications
• Identify and assess IT Application Controls (ITACs) for in-scope financial systems, including ERP platforms and supporting reporting tools
• Review and refresh the annual SOX scope; identify opportunities for control rationalization, automation, and testing approach improvements
• Partner with control owners to maintain and update process narratives, flowcharts, and standard operating procedures annually and following control changes
• Serve as the primary point of contact and liaison between IT and internal/external auditors for all IT audit and compliance activities
• Coordinate and facilitate audit walkthroughs, evidence collection, control testing, and stakeholder interviews across all audit cycles
• Manage external audit requests in a timely and organized manner; track and report on audit deliverable status to IT and finance leadership
• Align SOX testing approach and expectations with external auditors and control owners to ensure consistency with PCAOB standards and industry best practices
• Evaluate ITGCs and ITACs against applicable regulatory frameworks, including SOX/COSO, COBIT, NIST CSF, and ISO 27001; identify control gaps and design risk-based mitigation strategies
• Research and assess control deficiencies; collaborate with management and process owners to design practical remediation plans and track progress through to verified resolution
• Monitor emerging regulatory changes (SOX, HIPAA, GDPR, CCPA, state-level data privacy) and assess the impact on the IT control…