Director, Technology SOX Controls & Compliance

Are you an accomplished technology risk, security, and compliance leader ready to shape how a major enterprise protects the integrity of its financial reporting and technology environment? Join us asDirector, Technology SOX Controls and Compliance, where you'll set the vision for a modern, risk-based controls program and lead the strategy, governance, and evolution of our Sarbanes-Oxley (SOX), IT General Controls (ITGC), and technology security compliance programs.

You'll have the opportunity to influence enterprise risk strategy, strengthen critical technology controls, and advance how emerging technologies such as cloud, automation, and artificial intelligence are governed across the organization.

This position is in Richmond, VA with a hybrid work schedule.

We will consider a remote working option for the ideal applicant.In this newly built position, you'll guide and develop the individual responsible for Technology and Security Compliance at the senior manager level and their team.

You will also serve as a trusted advisor to senior leaders, Internal Audit, External Audit, and key business and technology collaborators.

You'll bring deep SOX and ITGC expertise, broad technology risk and security knowledge, and the executive presence to drive a forward-looking compliance strategy across a sophisticated enterprise environment.What you will be doing:


* Setting the strategy, multi-year roadmap, and operating model for enterprise SOX, ITGC, and technology compliance programs, aligning controls with business priorities, regulatory expectations, and the enterprise risk management framework.


* Leading, coaching, and developing the Senior Manager, Technology and Security Compliance and the broader controls team, building succession depth, strengthening accountability, and fostering a high-performing, continuous-learning culture.


* Providing executive oversight across the full annual SOX lifecycle, including scoping, risk assessment, control design, testing readiness, deficiency evaluation, remediation, and management certification, while ensuring timely and high-quality outcomes.


* Serving as the primary technology compliance liaison to External Audit, Internal Audit, the Disclosure Committee, and other governance forums, presenting control health, key risk themes, and deficiency assessments to senior leaders and, as needed, the Audit Committee.


* Fostering compliance modernization through continuous controls monitoring, GRC automation, data analytics, and the responsible use of artificial intelligence to improve control effectiveness, efficiency, and transparency.


* Assessing the control and compliance implications of emerging technologies, including AI and machine learning, generative AI, cloud and SaaS platforms, robotic process automation, and modern DevOps and CI/CD pipelines, embedding appropriate governance and risk treatment from the start.


* Aligning technology compliance with security and governance framew...