> Markdown version of [/jobs/ext/471010-enterprise-systems-security-manager](https://www.wearedevelopers.com/jobs/ext/471010-enterprise-systems-security-manager). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Enterprise Systems Security Manager - **Company:** Circle K Stores Inc. - **Location:** Tempe, AZ, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Control Objectives for Information and Related Technology (COBIT), Identity and Access Management, Information Technology Audit, Smartsuite, Strategies of Testing, Enterprise Software Applications, IT General Controls (ITGC), Information Technology - **Published:** June 7, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=d73919875f39ce2c ## About the Role Do you have experience in SOX?, Do you have a Bachelor's degree?, * Bachelor's degree in information technology, Computer Science, Business Administration, or a related field. * Professional certifications such as CISA, CRISC, or CISSP are preferred. Experience: * 5+ years of experience in IT SOX compliance, IT audit, or IT risk management in a global organization. * Proven experience with IT general controls (ITGCs), SOX 404, and related frameworks (e.g., COBIT, COSO). * Familiarity with ERP systems, cloud platforms, and GRC tools is highly desirable. Skills and Competencies: * Strong analytical and problem-solving skills with the ability to identify risks and recommend solutions. * Excellent communication and interpersonal skills to collaborate with diverse teams and stakeholders globally. * Strong knowledge of IT control design, operation, and testing methodologies. * Detail-oriented with strong organizational skills to manage multiple priorities effectively. * Ability to work both independently and collaboratively as part of a global team., In English In Spanish ## Description Job Summary: The Enterprise Systems Security Manager is responsible for safeguarding enterprise applications and IT environments through strong access governance, effective IT control management, and proactive risk and vulnerability coordination. This role partners closely with IT, Compliance, Audit, and business stakeholders to ensure SOX compliance, secure system operations, and continuous improvement of the organization's IT control framework. The ideal candidate combines technical expertise with governance, risk, and people leadership capabilities., Application Access Management * Lead enterprise-wide application access management strategies, including role design, provisioning, de-provisioning, and periodic access reviews. * Ensure least-privilege access principles are enforced across all critical systems and applications. * Partner with application owners and IAM teams to resolve access-related risks and audit findings. SOX IT Controls Management * Own and manage SOX IT General Controls (ITGCs) related to access, change management, and system operations. * Coordinate with Internal and External Audit teams to support SOX testing, walkthroughs, and evidence requests. * Maintain documentation for control effectiveness, control design, and risk assessments. Control Design and Expansion * Design, implement, and enhance IT control frameworks to support evolving business, regulatory, and security requirements. * Expand IT controls into new systems, applications, and processes as the enterprise technology landscape grows. * Evaluate control gaps and recommend scalable, sustainable solutions. Remediation Oversight * Oversee remediation efforts for identified control deficiencies, audit findings, vulnerabilities, and compliance issues. * Track remediation plans, timelines, and ownership to ensure timely and effective resolution. * Validate remediation effectiveness and ensure issues are fully resolved before closure. Vulnerability and Risk Coordination * Coordinate vulnerability and risk management activities across enterprise systems. * Partner with cybersecurity, infrastructure, and application teams to assess risk impact and prioritize mitigation efforts. Training and Support * Provide training and ongoing support to IT and business stakeholders on access controls, SOX requirements, and security best practices. * Act as a subject matter expert for IT controls, access governance, and audit readiness. * Promote a culture of accountability, security awareness, and compliance., * This position will have direct reports but is also expected to work as an individual contributor as needed. * This position requires a proactive approach to driving global IT compliance and control improvements. ## Related Videos - [Enabling intelligent logistics automation: home-grown Industrial IoT platform at Austrian Post](https://www.wearedevelopers.com/videos/2018-enabling-intelligent-logistics-automation-home-grown-industrial-iot-platform-at-austrian-post) - [Your Testing Strategy is broken - lets fix it!](https://www.wearedevelopers.com/videos/1672-your-testing-strategy-is-broken-lets-fix-it) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [It's not easy being green](https://www.wearedevelopers.com/videos/558-it-s-not-easy-being-green) - [To Me My X-Tests! - Mutation testing Strategies](https://www.wearedevelopers.com/videos/1959-to-me-my-x-tests-mutation-testing-strategies) - [One Pipeline, Three Regulator - SBOM Compliance for the Developer](https://www.wearedevelopers.com/videos/100169-one-pipeline-three-regulator-sbom-compliance-for-the-developer) ## Related Articles - [Spanish Business Culture and Etiquette](https://www.wearedevelopers.com/magazine/353-spanish-business-culture-and-etiquette) - [System change: restart as developer?](https://www.wearedevelopers.com/magazine/39-system-change-restart-as-developer) - [UK Business Culture and Etiquette](https://www.wearedevelopers.com/magazine/326-uk-business-culture-and-etiquette) - [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023) - [The Biggest German Tech Companies](https://www.wearedevelopers.com/magazine/424-the-biggest-german-tech-companies) - [Should senior developers refuse interview coding challenges?](https://www.wearedevelopers.com/magazine/29-should-senior-developers-refuse-interview-coding-challenges)