via Indeed
$140K - 180K a year
Manage IT governance and compliance including audit interactions, ITGC development, policy management, risk reporting, and vendor risk assessments.
Minimum 10 years IT experience in financial services with strong knowledge of risk frameworks (NIST, ISO, COBIT), ITIL, and audit processes including SOX.
IT Compliance & Governance Manager Full Time/Direct hire Location: NYC, NY (Hybrid) - only locals • *We need An IT Compliance & Governance Manager with a minimum ten (10) years working in IT preferably withing financial Services with a thorough understanding of Risk Frameworks NIST, ISO, COBIT, etc. and thorough understanding of ITIL. The Information Technology Governance and Compliance manager owns the IT governance framework, this role is meant to function as first and second line risk for IT. Candidate must be responsible for managing all request and interactions from second line risk, third line audit, external audit, and SOX as well as being the IT representative for all audit related initiatives. Including but not limited to attending all audit calls, gathering evidence artifacts independently where possible and speaking to the IT control environment. Accountable for definition, documentation, and build out of IT governance framework. • *** RECENT BANKING, CAPITAL MARKETS OR FINANCIAL SERVICES ARE REQUIRED Essential Job Functions: · Responsible for managing all request and interactions from second line risk, third line audit, external audit, and SOX. · IT representative for all audit related initiatives. Including but not limited to attending all audit calls, gathering evidence artifacts independently where possible and speaking to the IT control environment. · Accountable for definition, documentation, and build out of IT governance framework · Ownership over development and maintenance of the Information Technology General Controls (ITGC). · Responsible for all Policies, Standards, and Procedures for IT. Including but not limited to drafting, updating, and maintaining in a central repository. · Tracking and reporting of IT KRI’s. · Third party vendor onboarding IT risk assessments. · Maintain an annual calendar of risk and audit related initiatives to ensure adequate resource planning. · Manage all IT aspects in the enterprise GRC tool. · Other duties as assigned by manager. Job Type: Full-time Pay: $140,000.00 - $180,000.00 per year Work Location: In person
This job posting was last updated on 12/8/2025