Risk & Compliance Lead

Job Description Summary
This role leads the planning, execution, and continuous monitoring of IT Sarbanes-Oxley (SOX) compliance programs, IT General Controls (ITGCs), automated business process controls (ITACs), and technology risk assessments. This role bridges IT operations, cybersecurity, internal/external audit, and finance leadership to ensure financial data integrity and mitigate technical risks.

Job Description
Compliance, Risk & Regulatory Leadership

- Lead cybersecurity compliance, controls, and remediation across SOX, NERC CIP, ISO 27001, critical infrastructure requirements, audits, and customer commitments.

- Provide clear visibility to cyber risk, compliance health, control ownership, executive reporting, and third-party security expectations.

- Drive remediation with Teams to ensure compliance requirements are met on schedule.

Required Qualifications

- Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Engineering, or a related field, or equivalent professional experience.

- 6-8 years of progressive experience in Sox, Audit and IT compliance.

- At least 4 years of experience leading governance and compliance programs in a complex enterprise environment, including audit, controls and regulatory.

- Strong executive communication, sound judgment, stakeholder management, and program leadership skills with an ability to influence stakeholders and leadership.
Desired Characteristics

- Industry experience in energy, utilities, renewable energy, industrial manufacturing, or critical infrastructure.

- Working knowledge of SOX technology controls, UCF, ISO 27001, , or comparable control frameworks.

Additional Information
Relocation Assistance Provided: No