> Markdown version of [/jobs/ext/1993540-manager-it-compliance](https://www.wearedevelopers.com/jobs/ext/1993540-manager-it-compliance). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Manager, IT Compliance - **Company:** 14400 Arch Insurance Group Inc. - **Location:** Raleigh, NC, United States (Remote available) - **Experience:** Expert - **Salary:** $90,000.0 - $130,000.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Active Directory, Agile Methodology, Data Analysis, Cyber Security, Information Systems, Data Mapping, Data Security, DevOps, Information Technology Audit, IT Management, Internet Security, Python (Programming Language), PCI Data Security Standards, Windows PowerShell, Information Technology Security Auditing, SQL Databases, Scripting, Software Security, Information Technology - **Published:** August 8, 2026 - **Apply:** https://www.careerbuilder.com/job-details/manager-it-compliance-remote-east-coast-raleigh-jersey-city-or-new-york-city-preferred-nj--e96c7a6b-4870-48a7-850a-812f8a0e9109 ## About the Role * 5+ years of combined experience in the fields of Information Systems audit, IT security, IT governance, IT risk & IT compliance * In-depth knowledge and experience with Sarbanes-Oxley, PCI-DSS, ISO 27001, SOC 2 and the NYDFS Cybersecurity Regulation. * Working Knowledge of Windows Operating System and Active Directory Security including Users and Groups, Group Policy, Domain Structures, Security and Auditing. * Working knowledge of agile development methodology. * Working knowledge of DevOps practices and technologies. * Desire to measure and continuously improve in all areas and facets. * Demonstrated ability to balance short term tactical wins with longer-term strategic solutions. * Transformative mindset and experience operating as a change agent. Preferred Qualifications * 8+ years of combined experience in the fields of Information Systems audit, IT security, IT risk, & IT compliance. * CISSP, CISA, CISM, or CCSK Certifications. * Excellent oral and written communication skills with the ability to communicate technical concepts to a technical and non-technical audience. * Demonstrated ability to establish relationships and build rapport to influence colleagues at all levels, uncover business issues, and identify needs. * Experience in a highly regulated industry, such as insurance and/or financial services. * Some knowledge of and understanding of how to create/execute SQL queries, and scripts using Python and PowerShell. Environment and/or Physical Factors * Raleigh or Remote work with the ability to travel to the main assigned office quarterly for key meetings. * Ability to travel with in the U.S. up to 10-20% of the time. * Incumbent may be asked to perform other duties as required., Agile Programming Methodologies, Applications Security, Communication Skills, Computer Security, Continuous Improvement, Data Analysis, Data Mapping, Dental Insurance, DevOps, Due Diligence, External Audit, Financial Services, Health Plan, ISO (International Organization for Standardization), IT Governance, IT Requirements, Identify Issues, Information Technology & Information Systems, Information Technology/Systems Audit, Information/Data Security (InfoSec), Insurance, Internal Audit, Internet Security, Leadership, Management of Information Systems/Technology (MIS), Microsoft Active Directory, Microsoft Windows Operating System, Needs Assessment, PCI-DSS, Prescription Drugs, Presentation/Verbal Skills, Problem Solving Skills, Process Management, Python Programming/Scripting Language, Regulations, Risk, SQL (Structured Query Language), Sarbanes-Oxley Act (SOX), Scripting (Scripting Languages), Security Analysis, Security Auditing, Security Infrastructure, Willing to Travel, Windows PowerShell, Work From Home, Writing Skills ## Description With a company culture rooted in collaboration, expertise and innovation, we aim to promote progress and inspire our clients, employees, investors and communities to achieve their greatest potential. Our work is the catalyst that helps others achieve their goals. In short, We Enable Possibility. The Manager, IT Compliance, working closely with the CISO and Director of IT Security, will provide management, leadership and delivery of the compliance function, liaising closely with other IT and business stakeholders. He/she will be the main point of contact for all IT Compliance related activities including leading/coordinating IT control assessment activities (SOX, SOC 2, etc.) and customer information security due diligence reviews. Responsibilities * Work with IT process owners to identify/improve and document detailed controls for key application, security, and infrastructure components. * Provide on-going organization wide guidance on IT control requirements and impact. * Facilitate requests between control owners and Internal/external audit teams and be the main point of contact with the Internal and External Audit teams. * Manage and report on IT control gaps, track issues to completion, and provide recommendations for improvements. * Lead in the design and implementation of efficient and effective controls within the organization. * Participate in data privacy governance related activities such as data mapping and data privacy assessments. * Manage the response for IT-related customer security assessments. * Proactively identify IT control gaps with a focus on automating control reviews wherever possible. * Manage access recertification process. ## Related Videos - [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform) - [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java) - [Web-based Information Visualization](https://www.wearedevelopers.com/videos/84-web-based-information-visualization) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [DevOps Maturity Check – a way to balance autonomy and alignment](https://www.wearedevelopers.com/videos/58-devops-maturity-check-a-way-to-balance-autonomy-and-alignment) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023)