Risk & Compliance Lead

Job Description Summary

This role leads the planning, execution, and continuous monitoring of IT Sarbanes-Oxley (SOX) compliance programs, IT General Controls (ITGCs), automated business process controls (ITACs), and technology risk assessments. This role bridges IT operations, cybersecurity, internal/external audit, and finance leadership to ensure financial data integrity and mitigate technical risks.

Job Description

Compliance, Risk & Regulatory Leadership 

• Lead cybersecurity compliance, controls, and remediation across SOX, NERC CIP, ISO 27001, critical infrastructure requirements, audits, and customer commitments. 
• Provide clear visibility to cyber risk, compliance health, control ownership, executive reporting, and third-party security expectations. 
• Drive remediation with Teams to ensure compliance requirements are met on schedule.

 

Required Qualifications 

• Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Engineering, or a related field, or equivalent professional experience. 
• 6-8 years of progressive experience in Sox, Audit and IT compliance.
• At least 4 years of experience leading governance and compliance programs in a complex enterprise environment, including audit, controls and regulatory.  
• Strong executive communication, sound judgment, stakeholder management, and program leadership skills with an ability to influence stakeholders and leadership. 

Desired Characteristics 

• Industry experience in energy, utilities, renewable energy, industrial manufacturing, or critical infrastructure. 
• Working knowledge of SOX technology controls, UCF, ISO 27001, , or comparable control frameworks. 

Additional Information