Information Technology Compliance Manager

JOIN THE BEST TEAM IN SPORT & SPIRIT

At Varsity Brands, we believe every student deserves the opportunity to succeed and every educator wants to make a difference. It takes a team to make a real impact, and through our two divisions – BSN SPORTS and Varsity Spirit – and our network of 6,000+ employees and independent representatives, we are proud to partner with a wide range of educational institutions and club and professional sports to transform the student journey in SPORT and SPIRIT.

WORK TYPE: Remote

LOCATION DETAILS: Texas, Remote (must reside in the state of Texas)

WORK HOURS: Full time

TRAVEL REQUIREMENT: ~10%

HOW YOU WILL MAKE AN IMPACT

A successful Information Technology Compliance Manager will be a detail-oriented, self-driven and forward-thinking individual. They will be responsible for ensuring that our organization adheres to all relevant Information Technology (IT) Governance, Risk, and Compliance (GRC) standards, with a specific focus on Sarbanes-Oxley Act (SOX) requirements for public companies. This role will involve developing, implementing, and managing IT compliance programs and processes to mitigate risks and ensure the integrity and security of our IT systems and data.

WHAT YOU WILL DO

• Develop and maintain IT compliance policies, procedures, and controls in alignment with industry best practices, regulatory requirements, and company objectives.
• Conduct regular assessments and audits of IT systems, processes, and controls to identify compliance gaps and risks.
• Monitor and analyze user access controls within critical applications, such as SAP, to ensure compliance with regulatory requirements and internal policies.
• Conduct regular audits and reviews of user access rights, permissions, and segregation of duties to identify and remediate any violations or discrepancies.
• Collaborate with cross-functional teams, including IT, finance, legal, and internal audit, to ensure alignment of IT compliance initiatives with organizational goals.
• Provide guidance and support to IT teams in implementing and maintaining compliance controls, including access controls, change management, and data protection measures.
• Manage the IT compliance risk register and prioritize remediation efforts based on the level of risk exposure and impact.
• Coordinate and support internal and external audits related to IT compliance, including SOX audits, by providing documentation, evidence, and guidance to auditors.
• Monitor regulatory changes and industry trends related to IT compliance and communicate updates and implications to relevant stakeholders.
• Develop and deliver IT compliance training programs to raise awareness and build competency among employees regarding compliance requirements and responsibilities.
• Serve as a subject matter expert on IT compliance matters, providing advice, recommendations, and support to senior management and business units.
• Continuously evaluate and improve the effectiveness and efficiency of IT compliance processes and controls through regular reviews and assessments.
• Perform other duties as assigned.

QUALIFICATIONS

Knowledge/Skills/Abilities

• Strong understanding of IT governance frameworks (e.g., ITIL)
• In-depth knowledge of regulatory requirements (e.g., SOX, CCPA, GDPR, PCI-DSS)
• Strong understanding of regulatory requirements and standards relevant to access controls, including SOX (Sarbanes-Oxley), CCPA, GDPR, PCI-DSS and industry-specific regulations.
• Hands-on experience with access control tools and systems, such as SAP GRC (Governance, Risk, and Compliance) or similar platforms.
• Experience developing and implementing IT compliance programs, policies, and controls.
• Proven ability to conduct IT compliance risk assessments, audits, and gap analyses.
• Deep understanding of project and program management principles, methods, and techniques.
• Familiarity with IT systems and technologies, including network security, cloud computing, and enterprise applications.
• Commitment to maintaining confidentiality and integrity in handling sensitive information and compliance matters.
• Ability to work independently and manage multiple projects simultaneously in a fast-paced environment.
• Excellent communication and interpersonal skills, with the ability to effectively collaborate with diverse stakeholders and influence change.
• Strong analytical and problem-solving skills, with keen attention to detail and the ability to interpret complex data and identify trends, anomalies, and compliance risks.

Education/Experience

• Bachelor's degree in information technology, computer science, or a related field. Advanced degree or relevant certifications (e.g., CISA, CISSP, CRISC) preferred.
• Minimum of 5+ years of experience in IT compliance, governance, risk management, or related fields, preferably in a public company environment.

PHYSICAL REQUIREMENTS

This job operates in a professional office environment. Largely a sedentary role with some filing requiring the ability to lift files, open filing cabinets and bending or standing on a stool as necessary. The ability to sit or stand for long periods through meetings and while operating office equipment, PC’s, laptop, telephone will be required.  

#LI-MC1

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities required of the employee for this job.

OUR VALUES

Service - We lead with heart. We champion community.

Passion - We love what we do. It fuels our purpose.

Integrity - We do what we promise. We own our actions and decisions.

Respect - We earn it by giving it. Because everyone deserves it.

Innovation - We never stop striving to be better. For ourselves and our community.

Transparency - We are committed to openness and honesty in everything we do.

OUR BENEFITS

We are committed to putting you and your families first. For benefits eligible roles, we offer a variety of choices and costs as well as program enhancements that align with our responsibility to elevate the employee experience. Some of our offerings include:

• Comprehensive Health Care Benefits
• HSA Employer Contribution/ FSA Opportunities
• Wellbeing Program
• 401(k) plan with company matching
• Company paid Life, AD&D, and Short-Term Disability
• Generous My Time Off & Paid Holidays
• Varsity Brands Ownership Program
• Employee Resource Groups
• St. Jude Partnership & Volunteer Opportunities
• Employee Perks including discounts on personal apparel and equipment!

Varsity Brands companies are equal opportunity employers. Qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, citizenship, gender, sexual orientation, gender identity, veteran’s status, age or disability.