IT Controls & Compliance Manager

About the Role

We are looking for an IT Controls & Compliance Manager to implement IT controls as part of our SOX compliance program ahead of our IPO. You will be the key person ensuring the integrity and security of data that underpins our financial reporting — working across engineering, security, and finance to design and operationalize IT General Controls (ITGC).

This is a broad, high-impact role. You will have a real seat at the table and the opportunity to build something meaningful.

Challenges that await you:

• Identification and Assessment of Business Process Risks
• Design and implement ITGC and ITAC controls for SOX compliance (IT component)
• Collaborate with engineering and security teams to assess control effectiveness and remediate gaps
• Support internal and external audits, coordinate evidence collection, manage findings
• Work towards multiple compliance frameworks as the function grows (PCI DSS, NIST CSF, ISO 27001, etc.)
• Contribute to BCP/DRP planning across multiple operational jurisdictions
• Continuously improve IT security processes and control environments

What makes you a great fit:

• 5+ years of experience in IT audit, IT risk, IT compliance, or Information Security
• Strong hands-on knowledge of SOX (IT component), ITGC, ITAC
• Understanding of cloud infrastructure and its associated risk landscape
• Understanding data management processes and information integrity
• Knowledge of the fundamentals of information security processes
• Flexibility and ownership mindset — you will be building, not just maintaining

Nice to have:

• Industry experience at a publicly traded or pre-IPO company
• Knowledge of and experience working with regulatory documentation in the financial sector (regarding IT and information security)
• Certifications: CISA, CRISC or similar

Language

• B2 or higher English level for effective communication with an international team

Work approach

• Highly adaptable to changes in priorities, while maintaining the quality, scope, and integrity of the audit
• Demonstrated resilience, professional judgment, and high tolerance for pressure and complexity