Edtech.com's Summary

McGraw Hill is hiring a Sr Director, IT internal Controls & Risk Compliance to lead Sarbanes-Oxley compliance implementation for its Digital Enterprise Solutions organization. The role establishes a scalable IT control and governance framework and serves as the primary IT lead for SOX, partnering with DES leadership, Finance, Internal Audit, and External Audit. Over time the director is expected to grow the program beyond initial SOX implementation into broader IT risk management leadership.

Highlights

Plan audit scope and run SOX and SOC2 assessments from risk assessment through reporting, issue validation, and follow-up.
Guide control owners on designing effective controls and ensure timely remediation of deficiencies.
Implement IT general controls covering access provisioning, segregation of duties, change management, and operations controls.
Maintain risk and control matrices, narratives, and system architecture documentation.
Build an enterprise IT risk and compliance program, including policies, standards, and executive reporting metrics.
Coordinate with external auditors to leverage their work and minimize disruption to the business.
Provide advisory support to Internal Audit on operational or non-SOX IT audits.
10+ years of progressive experience in IT audit, IT risk management, or SOX compliance in a complex corporate environment.
Advanced knowledge of internal control frameworks such as COSO, COBIT, and NIST.
Base pay range of $124,000 - $215,000 annually, with a possible annual bonus plan and a range of medical and other benefits.

Sr Director, IT internal Controls & Risk Compliance Full Description

How can you make an impact?

The Sr. Director, IT Internal Controls & Risk Compliance for the Digital Enterprise Solutions (DES) organization leads the company’s Sarbanes-Oxley (SOX) compliance implementation and establishes a scalable and sustainable IT control and governance framework appropriate for our dynamic environment. This role serves as the primary IT lead for SOX compliance, partnering with DES leadership, Finance, Internal Audit, and External Audit to design, document, test, remediate, and standardize controls across a complex landscape including McGraw Hilll’s digital products, Oracle ERP, data and analytics environment, and multiple in-scope financial and operational applications. The ideal candidate leverages deep IT audit experience, strong technical understanding of complex multi-system environments, and exceptional leadership skills to drive compliance and mature our IT governance program, evolving beyond initial SOX implementation into broader risk management leadership.

This is a remote position open to applicants authorized to work for any employer within the United States.

What You’ll Do:

Audit Execution and Risk Assessment: Plan and develop audit scope for complex assessments including SOX and SOC2 audits; participate in end-to-end engagements from planning through risk assessment, execution, reporting, issue validation, and follow-up; apply a robust understanding of business and IT risks and how controls address these risks. Provide advisory support to Internal Audit on operational or non‑SOX IT audits as needed.

Internal Controls & Remediation: Provide guidance to control owners on designing and implementing effective controls, ensure timely remediation of deficiencies, recommend improvements; design and implement controls for new entities and evolving business processes; support SOX readiness initiatives and system implementations to embed business, IT, and automated controls appropriately.

SOX and Compliance Expertise: Apply strong knowledge of SOX requirements, internal control frameworks (COSO, COBIT, NIST), and risk assessment principles to identify control gaps, assess risks, and recommend practical, business-focused solutions; effectively communicate SOX control concepts, audit findings, and remediation expectations to process owners and management, including senior leadership

IT Controls Implementation & Sustainment: Lead evaluation and implementation of IT General Controls—including user access provisioning/deprovisioning and periodic reviews, segregation of duties considerations, change management and release controls, and operations controls (interfaces, batch processing, backups, monitoring); assess and document controls across complex application landscapes such as digital products, Oracle ERP, legacy/custom, and SaaS; maintain comprehensive risk & control matrices, narratives, and system architecture documentation; partner with Finance and other stakeholders to identify IT-dependent controls and support audit walkthroughs and testing.

Program Development & Sustainability: Participate in the building of an enterprise IT risk and compliance program beyond initial SOX implementation; maintain an inventory of in-scope applications, infrastructure, and related risks; align IT risk management with enterprise and DES risk initiatives; support development of IT policies and standards, and the creation of metrics for executive, Committee, and Audit reporting; integrate recognized governance frameworks and establish sustainable compliance monitoring processes.

Collaboration & Coordination: Coordinate audit activities with external auditors to maximize efficiency, leverage work performed, and minimize disruption to the business; build strong relationships across DES, IT, Finance, Internal Audit, and business partners; collaborate effectively to partner across functions and stakeholders.

Who You Are:

10+ years of progressive experience in IT audit, IT risk management, or SOX compliance within a complex corporate environment.
Proven track record in planning and executing internal, SOX (Business & IT), operational, and IT audits
Experience supporting SOX implementations or major control transformations preferred
Experience working with PCAOB‑regulated auditors
Familiarity with audit management tools
Big 4 or equivalent public‑company experience preferred
Advanced understanding of internal control frameworks and risk assessment methodology
Exceptional leadership, communication, problem-solving, critical thinking, and stakeholder management capabilities
Ability to coach and guide control owners; demonstrated ability to build consensus and work across a matrixed organization.

Why work for us?

The work you do at McGraw Hill will be work that matters. We are collectively building experiences that will help shape the future of education. Play your part and experience a sense of fulfilment that will inspire you to even greater heights.

The pay range for this position is between $124,000 - $215,000 annually. However, base pay offered may vary depending on job-related knowledge, skills, experience, and location. An annual bonus plan may be provided as part of the compensation package, in addition to a full range of medical and/or other benefits, depending on the position offered. Click here to learn more about our benefit offerings.

Let me find your next job.

Thanks - you're signed up.

Sr Director, IT internal Controls & Risk Compliance

Edtech.com's Summary

Sr Director, IT internal Controls & Risk Compliance Full Description

Clinical Compliance Coordinator

Clinical Trial Compliance Administrator

Research Compliance Officer – Conflict of Interest

Compliance Administrator

Compliance Specialist