Job description

Position: Enterprise Compliance Lead Location: Dallas, TX (Hybrid) Duration: 12 Months Job Overview: We are seeking an experienced Enterprise Compliance Lead with deep expertise in SOX IT controls, CI/CD pipeline governance, and automated evidence collection. This role will ensure that the organization’s CI/CD platform (especially GitHub Actions workflows) adheres to SOX compliance standards and enterprise audit requirements. You will design, implement, and validate controls for change management, separation of duties, and audit traceability, while enabling a streamlined developer experience. Key Responsibilities: • Ensure all GitHub Actions workflows are fully compliant with SOX and internal audit policies. • Design, implement, and validate technical controls for: • Separation of Duties (SoD) • Change Management • Audit Trail & Traceability • Automate evidence collection and reporting to streamline audits and reduce manual overhead. • Partner with internal and external auditors to demonstrate compliance. • Map regulatory requirements to technical implementations in CI/CD pipelines. • Build dashboards or tools to help stakeholders monitor compliance status. • Advise developers and platform teams on secure, compliant design patterns. • Provide audit defense for CI/CD systems and resolve compliance gaps. Required Qualifications: • Bachelor’s degree in Computer Science, Engineering, or a related technical field. • 7+ years of experience in IT Compliance, Audit, or Governance roles. • Strong hands-on experience with: • SOX IT controls and testing • CI/CD tools (GitHub Actions, Jenkins, GitLab CI, Azure DevOps, etc.) • Audit automation and evidence collection tools • Change management and ITGC (IT General Controls) • Ability to translate regulatory and audit requirements into technical solutions. • Strong documentation skills for compliance reports and audit deliverables. Preferred Qualifications: • Master’s degree in Computer Science, Information Systems, or related field. • Prior experience at a Big 4 audit firm or in a regulated enterprise environment. • Familiarity with GRC platforms (e.g., ServiceNow GRC, Archer). • Experience designing automated controls that balance security and developer velocity. • Understanding of cloud compliance (AWS, Azure, or GCP). • Excellent communication skills for cross-functional collaboration and audit discussions.

Requirements