Senior IT Project Manager — Compliance Delivery
Senior IT Project Manager — Compliance Delivery
Posted 15 days ago
SENIORITY
Manager
About the role
- SOX IT controls and audit readiness — access and change-management controls, service-management workflows that produce audit evidence, and remediation tracking with control owners
- NetSuite and business systems — intake, access governance, segregation of duties, testing and release management for business applications
- Government compliance — CUI handling, NIST 800-171 / CMMC work and secure-environment projects, coordinated with security and legalIT projects with engineering and R&D — endpoint, software and infrastructure requests from technical teams
- Tool evaluations and vendors — real selection criteria (usability, compliance, vendor quotes, implementation effort and timeline), and holding implementation partners to dates
- Policies and documentation — keeping IT and security policies current through review and sign-off
- What You'll Own:
- Run program-level orchestration across those workstreams — integrated roadmap, cross-workstream dependency management, and unified status and risk reporting to executive stakeholders
- Decompose a broad compliance mandate into discrete, parallel workstreams with clear scope, owners, sequencing, and dependencies
- Drive SOX readiness workstreams end-to-end — control documentation, gap assessment, remediation tracking, and audit preparation
- Lead government/regulatory compliance readiness initiatives in partnership with Legal and ITInterview process and control owners across Finance, IT, and Operations; document current state and close documentation gaps
- Produce the documentation, process maps, control narratives, SOPs, and other supporting compliance deliverables
- Build and run the program structure — plans, status cadence, risk/issue tracking — that keeps readiness work visible and moving
- Get hands-on with systems: understand access models, workflows, and data flows well enough to document and test controls yourself
- Leverage technology and AI to streamline the work — automating evidence collection, accelerating documentation, and building lightweight tooling instead of throwing hours at manual processes
- Coordinate internal teams and external auditors/consultants supporting compliance efforts
- Establish repeatable compliance practices the company can carry forward
- How you'll work:
- Work the CIO's priority list first; raise risk early, with options and a recommendation
- Run a short weekly status that leadership doesn't have to chase: done, at risk, what you need
- Bring stakeholders a clear position with an owner and a date — not a list of open concerns
- Check what already exists (contracts, prior work) before starting something new
- Use AI tools to move faster; nothing goes out without your own review
- First 30 days: every active project mapped with its owner, real status and next date
- First 90 days: delivering against an agreed plan, with audit evidence on time
- Ongoing: auditors, finance and engineering trust the dates you give
- 7+ years delivering IT projects hands-on, from plan to handover
- Delivered compliance, audit-readiness or security remediation (SOX ITGC, PCI, NIST, CMMC or similar) through at least one external audit
- A concrete example of raising risk early and driving a decision
- Program-level experience — you’ve structured and run multiple concurrent workstreams under one umbrella, not a sequence of single projects, and built that structure from an unstructured starting point
- Senior-level project management experience in IT, compliance, or regulated environments
- Comfortable working in the tools as they are, deferring to specialists, and running without coordinator support
- Technical enough to be dangerous: you can read a system, understand an access model, and draft an ITGC narrative without an engineer holding your hand
- A builder's instinct for efficiency — you use modern tools (including AI) to compress documentation, evidence, and tracking work, not just manage it manually
- Comfortable in ambiguity: you build structure where none exists, and you're as happy interviewing a process owner as you are updating a control matrix
- Strong cross-functional communication — Finance, Legal, IT, and executivesU.S. person (citizen or green-card holder)
- Government Contractor experience is a strong plus
- Familiarity with federal/government compliance frameworks is a strong plusPMP, CSM, or comparable delivery credentialSOX IT change management
- NetSuite or other ERP deliveryCMMC, NIST 800-171, CUI or ITARFreshservice or Service
- Now, and JiraWhy This Role:
- Ground-floor compliance program build at a company at a genuine inflection point — public-company obligations, fast growth, real stakes
- Direct access to leadership; your work is visible and consequential
- Strong likelihood of contract extension or conversion for the right person
- This probably isn't for you if:
- You want to run a PMO or manage other project managers
- You'd rather facilitate ceremonies than own deliverables
- You need a fully defined scope before you start
Before you apply
Applying takes about a minute. These four things decide how fast it moves after that.
Your profile is current
It's what we read first. Occupations, seniority and locations matter more than a long history.
Two examples you can talk through
Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.
A number in mind
What you're on now and what would make you move. We negotiate better when we know both.
Your notice period
Employers plan around it, and it's the question that stalls offers most often.
Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.
