Manager, Security Controls Architect

Overview:

The Manager, Security Controls Architect is responsible for driving the technical implementation and maintenance of scalable security controls within the IT landscape. This role plays a critical part in supporting IT General Controls (ITGCs), SOX compliance architectures, and related tools, ensuring robust and effective solutions. The Manager collaborates closely with the Security Controls Architecture team, business stakeholders, and development teams to ensure technical alignment and provide hands-on expertise in risk mitigation, controls design, and compliance frameworks.

Key Responsibilities

Control Architecture & ITGCs:

• Assist in the design, implementation, and ongoing maintenance of ITGC frameworks and compliance architectures.
• Execute mitigating and compensating controls to address identified risks and evolving requirements.
• Provide technical guidance for integrating security controls within new and existing systems.

• Drive technical enhancements and configurations for GRC tools (e.g., SAP GRC, Workiva) to ensure streamlined compliance execution and reporting.
• Perform technical tasks related to user access reviews, role owner reviews, and control lookbacks.
• Collaborate with technology partners to support tool optimization and advanced implementations.

• Identify technical gaps in controls and recommend solutions to improve reliability and effectiveness.
• Support real-time control monitoring, providing direct technical input to remediate issues and enhance processes.
• Participate in the creation and refinement of policies, procedures, and best practices for controls execution.

• Work closely with IT teams, business stakeholders, and assurance groups to ensure compliance requirements are understood and technically supported.
• Provide specialized consulting on technical control design and risk mitigation strategies.

• Bachelor's degree in Information Technology, Computer Science, Engineering, or related field.
• 5+ years of experience in IT architecture, compliance, or technical risk management.
• Hands-on experience with designing and implementing IT general controls, SOX compliance, and working knowledge of security architectures.
• Proficiency with GRC tools (e.g., SAP GRC, Workiva) and IT systems related to compliance monitoring.
• Strong knowledge of IT infrastructure, business systems, and cybersecurity practices.
• Ability to collaborate across teams and provide technical recommendations aligned with compliance needs.
• Professional certifications preferred: CISSP, CISM, CISA, or equivalent.

• Innovation: We embrace a culture of experimentation and innovation, providing you the opportunity to contribute to new, different, or better ways of doing things.
• Agile Work Environment: We embrace agile with management that believes in removing barriers, so you are empowered to experiment, iterate, and innovate.
• Industry Leaders: Collaborate with leaders in the industry. Our team is composed of professionals who are experts in their fields, providing an environment where you can learn, grow, and make a significant impact.