Manager, IT Governance & Compliance - TForce Freight

Job Description

IT Governance & Compliance Manager - JOB DESCRIPTION

About this role:

As an IT Governance and Compliance Manager, you will be responsible for leading, planning and executing the global Information Technology (IT) governance and compliance program at TForce Freight.

You will be a part of the IT team delivering innovative technology solutions to support our logistics and transportation business.

The activities include information security reviews, IT control evaluations, leading control enhancements to the environment and advising IT leaders and business stakeholders on governance and compliance matters.

The ideal candidate will leverage their IT audit expertise in information security, internal control best practices and risk management to enhance governance and compliance over technology and operations at TFF.

The role will report to the Director of Information Management.

This is a remote / hybrid position.

Prefer candidate is in the Richmond, VA area.

For highly qualified candidate would accept Mid-Atlantic region.

Responsibilities:


* Manage the IT SOX / ICFR compliance program in collaboration with IT leadership and Corporate Internal Audit


* Develop, enhance and implement IT policies and processes over areas such as information security, financial reporting, sales operations, order management, HR, R&D, data protection including automated application and infrastructure risks


* Develop and execute risk-based assessments of IT processes & security controls


* Identify critical risks, communicate to the business and recommend solutions


* Connect the dots across business processes and systems, providing management with new insights


* Assess and articulate risks associated with system configuration, administration and segregation of duties


* Evaluate the effectiveness of key information technology processes and influence process improvements with IT and business owners, ensuring that gaps in risk management are resolved.


* Maintain technical expertise and apply leading practices in advanced audit techniques (e.g.

risk assessments, analytical review procedures, statistical sampling, data analysis tools)


* Collaborate and coordinate with Financial Auditors, Internal Controls Group, auditees, vendors, and external auditors


* Manage areas of IT risk focus, which may include, amongst others: SDLC processes (waterfall & agile), systems change management, logical access, database and operating system configuration and security, end-user computing, SAAS security and control, IT architecture control, cloud computing

Experience & Education:


* The successful candidate must have a bachelor's degree and minimum of 4 years IT risk advisory, information security or IT audit experience with a public accounting firm and/or large corporation's internal audit department.


* Knowledge of segregation of duties concepts, sensitive access, application controls and user access security .
...