1

It Risk Manager Jobs in Spotswood, NJ (NOW HIRING)

Senior Director, IT/Technology Audit

New York, NY ยท On-site

$102K - $135K/yr

The Senior IT Audit Director is a senior leadership role within Internal Audit, responsible for ... Demonstrated ability to build and execute risk assessments and audit plans, manage multiple ...

The incumbent will be responsible for the oversight of the operational risk management framework and program including IT risk management, business continuity planning. The VP will be responsible for ...

Showing results 21-40

It Risk Manager information

See Spotswood, NJ salary details

$51.6K

$111.7K

$170.2K

How much do it risk manager jobs pay per year?

As of Sep 4, 2026, the average yearly pay for it risk manager in Spotswood, NJ is $111,717.00, according to ZipRecruiter salary data. Most workers in this role earn between $90,100.00 and $129,200.00 per year, depending on experience, location, and employer.

What does an IT Risk Manager do?

An IT Risk Manager is responsible for identifying, assessing, and mitigating risks that could impact an organization's information technology systems and data. They develop and implement risk management strategies, policies, and procedures to protect against cybersecurity threats, data breaches, and compliance violations. IT Risk Managers also work closely with other departments to ensure security best practices are followed and often lead risk assessments, audits, and incident response planning.

What are some common challenges faced by IT Risk Managers when implementing risk mitigation strategies across different departments?

IT Risk Managers often encounter challenges such as varying levels of risk awareness among departments, resistance to new controls or procedures, and balancing business objectives with security requirements. Successful risk mitigation requires clear communication, stakeholder buy-in, and tailored training to ensure all teams understand the importance of compliance. Building strong relationships and fostering a culture of shared responsibility are key to overcoming these hurdles and ensuring effective risk management across the organization.

What are the key skills and qualifications needed to thrive as an IT Risk Manager, and why are they important?

To thrive as an IT Risk Manager, you need a solid understanding of risk assessment, information security, and compliance frameworks, often backed by a bachelor's degree in information technology or related fields. Familiarity with tools such as risk management software, GRC platforms, and certifications like CISSP, CISM, or CRISC is typically required. Strong analytical thinking, communication skills, and the ability to influence stakeholders are crucial soft skills in this role. These skills ensure effective identification, mitigation, and communication of IT risks, supporting organizational resilience and compliance.

What is the difference between It Risk Manager vs Cybersecurity Analyst?

AspectIt Risk ManagerCybersecurity Analyst
CertificationsCRISC, CISSP, CISMCISSP, Security+, CEH
Work EnvironmentOversees risk management strategies across IT systemsMonitors and responds to security threats and incidents
Industry UsageUsed in organizations with complex IT infrastructuresCommon in security-focused roles across industries

The It Risk Manager focuses on identifying and managing IT risks at an organizational level, ensuring compliance and risk mitigation strategies. In contrast, a Cybersecurity Analyst primarily monitors security threats and responds to incidents. While both roles require similar certifications and work within the IT security domain, the It Risk Manager has a broader scope related to risk management policies, whereas the Cybersecurity Analyst concentrates on threat detection and response.

What cities near Spotswood, NJ are hiring for It Risk Manager jobs?

Cities near Spotswood, NJ with the most It Risk Manager job openings:

Senior Director, IT Governance, Risk and Compliance

TKO Group Holdings, Inc.

New York, NY โ€ข On-site

Full-time

Medical, Retirement, PTO

Posted 22 days ago


Key responsibilities

  • Lead and execute IT compliance initiatives, including SOX, IT General Controls, and audit readiness activities.

  • Coordinate across risk management functions to support and evolve the IT risk management program and maintain compliance documentation.

  • Act as the primary contact for IT compliance audits, organize evidence, and support remediation of control gaps.


Job description

Who We Are:
TKO Group Holdings, Inc. (NYSE: TKO) is a premium sports and entertainment company. TKO owns iconic properties including UFC, the world's premier mixed martial arts organization; WWE, the global leader in sports entertainment; and PBR, the world's premier bull riding organization. Together, these properties reach 1 billion households across 210 countries and territories and organize more than 500 live events year-round, attracting more than three million fans. TKO also services and partners with major sports rights holders through IMG, an industry-leading global sports marketing agency; and On Location, a global leader in premium experiential hospitality.
Job Summary
The Senior Director, IT Governance, Risk and Compliance, is responsible for leading and executing core elements of TKO's IT compliance program, with a focus on SOX and IT General Controls, audit readiness, governance documentation, benchmarking against recognized security frameworks, third-party assurance, and technical data reconciliation activities. Reporting to TKO's SVP of IT Business Systems, this role will partner closely with Legal, IT, Security, Internal Audit, Finance, and business stakeholders to strengthen TKO's control environment, support enterprise compliance obligations, help lead risk management, and drive consistent execution across systems and processes.
This role requires both strategic oversight and hands-on execution. The successful candidate will bring deep experience in IT compliance and controls, strong technical data management capability, and the ability to operate effectively across a complex environment with disparate systems, inconsistent data structures, and evolving business needs.
Essential Duties and Responsibilities
IT Compliance Planning and Program Execution
  • Establish an overall compliance strategy and roadmap which includes selecting and implementing an enterprise Governance, Risk and Compliance platform to automate RCM authoring and drive evidence collection workflows.
  • Own prioritization, tracking, and delivery of key compliance initiatives including executive status updates regarding the program status and health
  • Provide subject matter expertise and guidance to system leads and business partners on compliance expectations, control execution, documentation standards, and system implementation lifecycle considerations
  • Advise and ensure PCI compliance is being sustained by in-scope business units.
  • Oversee internal resources, project-based support, or cross-functional contributors in connection with audit preparation, SOC reporting, PCI compliance adherence, and compliance execution.

Governance, Risk, and Documentation Management
  • Coordination across other risk management stakeholder functions (e.g. Legal, Finance, Internal Audit, Corporate IT, BU level IT organizations) to accomplish the following:
    • Support and evolve existing IT Risk Management Program to ensure controls address Technology, Cybersecurity, Data, Resiliency/Recovery, and Emerging (AI, etc.) risks.
    • Establish IT compliance requirements
    • Identify and eliminate redundant risk management processes and/or controls
    • Understand and support the risk management objectives of other risk management functions
  • Maintain current inventories of in-scope systems and applications that are required to support key regulatory requirements (e.g., ICFR), in-flight IT projects, and relevant stakeholders
  • Develop the framework and standards for core IT compliance documentation and templates, including Risk and Control Matrices, process flows, system interface documentation, and remediation plans
  • Determine the review criteria and cadence for assessing documentation prepared by system leads and control owners for quality, completeness, and alignment with compliance requirements
  • Establish policies, procedures, and governance practices that support effective and sustainable compliance execution

SOX, IT General Controls, and Audit Support
  • Act as primary point of contact for IT compliance supporting internal and external audits, including SOX and IT General Controls testing
  • Organize, collect, and maintain evidence required for audit requests and management review
  • Liaise with internal stakeholders and auditors to ensure timely and accurate delivery of required materials
  • Create repeatable processes for the identification, tracking, and remediation of control gaps, deficiencies, and related action plans
  • Create and support an IT risk assessments, control reviews, and compliance evaluations process

SOC Reporting and Third-Party Assurance
  • Manage the lifecycle of Service Organization Control reporting
  • Ensure completion of management evaluation documentation related to third-party controls and reliance
  • Support assessment of third-party compliance risk in areas such as access management, vendor management, and change management

Technical Data Reconciliation and Compliance Operations
  • Partner with IT and Finance colleagues to monitor adherence with internal policies and key metrics regarding control environment activities (e.g. reconciliation activities, data analysis, data hygiene, etc.)
  • As part of the user termination process, work closely with the infrastructure and application system owners to ensure terminations are completed timely and if any are missed (outside the acceptable window), a full look back analysis is conducted and send confirmation materials to internal audit.
  • Establish continuous monitoring processes.

Monitoring, Reporting, and Training
  • Monitor changes in relevant compliance, privacy, and security requirements and support translation of those requirements into practical business processes
  • Prepare reporting for management regarding compliance status, risks, remediation efforts, and control effectiveness
  • Collaborate with Internal Audit, financial controls and IT in the development of training materials related to IT compliance, data privacy, and security practices
  • Support awareness efforts for IT teams and business stakeholders to promote a culture of accountability and compliance

Supervisory Responsibilities
This role may oversee internal resources, project-based support, or cross-functional contributors in connection with audit preparation, SOC reporting, PCI compliance adherence, and compliance execution.
Required Qualifications
  • Bachelor's degree in Computer Science, Information Systems, Information Security, Accounting, Finance, or a related field
  • 10+ years of significant progressive experience in IT compliance, IT audit, risk management, cybersecurity compliance, or a related governance function
  • Demonstrated experience supporting SOX and IT General Controls in a complex environment
  • Experience developing and enhancing Risk and Control Matrices, process flows, remediation plans, system inventories, and related compliance documentation
  • Strong cross-functional partnership experience with Legal, IT, Security, Internal Audit, Finance, and business stakeholders

Preferred Qualifications
  • Experience supporting compliance activities in connection with mergers and acquisitions
  • Experience managing third-party assurance processes, including SOC report review and evaluation
  • Familiarity with enterprise control frameworks such as NIST and ISO 27001
  • Experience in a public company or similarly regulated environment
  • Knowledge of SAP (S/4) a plus as this is our Enterprise Finance and Accounting ERP

Knowledge, Skills, and Abilities
  • Strong knowledge of SOX, ITGC, and general compliance frameworks
  • Advanced proficiency in Excel with a strong working knowledge of PowerQuery, SQL, or similar tools preferred
  • Understanding of access management, vendor management, change management, and audit evidence requirements
  • Strong analytical and problem-solving skills with exceptional attention to detail
  • Excellent written and verbal communication skills, including the ability to communicate technical concepts to non-technical stakeholders
  • Strong organizational, project management, and documentation skills
  • High degree of integrity, discretion, and professional judgment
  • Ability to balance strategic priorities with hands-on execution

Certifications
Preferred certifications include:
  • Certified Information Systems Auditor (CISA)
  • Certified Information Systems Security Professional (CISSP)
  • Certified in Risk and Information Systems Control (CRISC)

Per local requirements and in the interest of transparency, the hourly rate shown below reflects the prevalent current hiring range for this position. Hiring pay rates are based on a number of factors, including location and may vary depending on job-related qualifications, knowledge, skills and experience. The company strives to provide locally competitive rewards packages, which include base rate along with, as applicable, short- and long-term incentives, growth and developmental opportunities, and robust benefits, such as health care, retirement, vacation and other paid time off, and additional offerings.
Hiring Rate Minimum:
$157,500 annually(minimum will not fall below the applicable State/local minimum salary thresholds)
Hiring Rate Maximum:
$210,000 annually
TKO is an Equal Opportunity Employer and complies with all applicable federal, state, and local laws regarding non-discrimination in employment. TKO makes employment decisions based on merit and qualifications, without considering an employee's or applicant's race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, disability, marital status, veteran status, or any other basis prohibited under federal, state or local laws governing non-discrimination in employment in every location in which the Company has facilities. TKO also provides reasonable accommodations for qualified individuals with disabilities in accordance with the Americans with Disabilities Act (ADA) and applicable state or local laws. For information about Privacy and Information Security for TKO employment candidates, please review our Privacy Policy. For information regarding Terms of Use for this and other TKO websites, please review our Terms of Use.