It Risk Manager Jobs in Boston, MA (NOW HIRING)

This role will strengthen the company's control environment, reduce compliance and operational risk, and ensure timely execution of remediation efforts while enabling strategic technology investments to be implemented with appropriate governance. As the organization grows toward its long‑term revenue objectives, this position provides critical capacity to support scalable, sustainable, and audit‑ready IT operations.

• Own and lead the ITGC and IT internal audit program, including planning, coordination, execution support, documentation quality, issue management, and executive‑level status reporting.
• Serve as a senior advisor to IT and business control owners on SOX ITGCs, automated controls, key reports, IT‑dependent controls, governance expectations, and sustainable control design.
• Collaborate with the ITGC Manager to manage end‑to‑end audit lifecycle activities with external auditors and internal stakeholders, including walkthroughs, evidence readiness, testing coordination, deficiency evaluation, and timely issue resolution.
• Lead the assessment of IT control risks across enterprise applications, infrastructure, cybersecurity, access management, change management, operations, and emerging technology initiatives.
• Oversee remediation of IT‑related audit findings and corrective actions, ensuring action plans address root cause, are appropriately documented, and are validated for operating effectiveness.
• Partner with IT leadership, project teams, and process owners to embed control requirements into new system implementations, enhancements, SDLC activities, and process transformation initiatives.
• Develop and maintain scalable IT compliance processes, templates, metrics, dashboards, and governance routines to improve program maturity, efficiency, consistency, and accountability.
• Partner with the ITGC Manager on continuous improvement efforts to reduce audit friction, strengthen evidence quality, improve control owner readiness, and enhance the overall IT risk and compliance operating model.
• Manage internal corrective actions assigned to IT, coordinating with subject‑matter experts to identify and push forward remediation plans.
• Provide coaching, direction, and quality review for team members, consultants, or control owners supporting ITGC, SOX, and internal audit activities.

• Bachelor’s degree in Information Systems, Accounting, Finance, Computer Science, or a related field.
• Minimum of 8 years of progressive experience in external audit, internal audit, IT compliance, IT risk management, or SOX advisory, with significant focus on IT General Controls and enterprise application controls.
• Demonstrated experience leading audit programs, managing cross‑functional stakeholders, and presenting risk and compliance matters to senior leaders.
• Strong understanding of ITGC domains, including access management, change management, computer operations, interface controls, automated controls, key reports, and SDLC governance.
• Experience supporting enterprise environments such as SAP, Workday, ServiceNow, and related business applications preferred.
• People leadership, indirect leadership, or consultant management experience preferred; ability to coach control owners and influence without authority required.
• Excellent written and verbal communication skills, with the ability to translate complex IT risk and control topics into clear, actionable guidance for business and technology leaders.

The estimated salary range for this role, based in the United States of America is $130,000-$175,000. Compensation decisions are dependent on several factors, including, but not limited to, an individual's qualifications, location, internal equity, and alignment with market data. Additionally, employees are eligible to participate in one of our variable cash programs (bonus or commission) and may receive equity as part of the compensation package. We offer a wide range of benefits such as paid time off, health/dental/vision, retirement benefits, and flexible spending accounts. All compensation and benefits information will be confirmed in writing at the time of offer.