> Markdown version of [/jobs/ext/736748-senior-it-controls-lead](https://www.wearedevelopers.com/jobs/ext/736748-senior-it-controls-lead). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior IT & Controls Lead - **Company:** IONIC DIGITAL INC. - **Location:** Washington, DC, United States (Remote available) - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Software as a Service, CompTIA Security+, Data Centers, Digital Assets, Identity and Access Management, IT Management, Information Technology Operations, Netsuite, Azure Active Directory, Cloud Services, Single Sign-On, Data Logging, High Performance Computing, IT General Controls (ITGC), Bitcoin Mining, Information Technology, CIS Benchmarks - **Published:** June 29, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=4a920df8eeb70f58 ## About the Role Do you have experience in Sarbanes-Oxley (SOX) compliance documentation?, * 5-8 years of progressive IT experience, including at least 2 years in a controls, security, governance, or compliance-adjacent role. * Working knowledge of SOX ITGC domains, including logical access, change management, operations, and backup/recovery. * Experience with access governance, identity management, Azure AD / Entra ID, and security policy frameworks. * Experience maintaining control documentation, evidence, audit support materials, or comparable compliance records. * Ability to work effectively with IT Operations, business teams, external consultants, and auditors. * Strong written and verbal communication skills. * Strong organizational skills, attention to detail, and ability to manage multiple priorities in a fast-paced environment. Preferred Experience: * Public company or SOX-controlled environment experience. * CISA, CRISC, CCSP, Security+, ITIL, or similar certification. * ISO 27001, SOC 2, or comparable security and compliance framework experience. * Experience with ERP access controls, segregation of duties, or NetSuite security administration. * Experience working with external auditors and coordinating ITGC testing activities. * Experience with SaaS governance, vendor risk management, technology procurement standards, or security reviews. * Experience in digital assets, bitcoin mining, data center operations, energy infrastructure, or high-performance computing environments. Skills/Abilities * Ability to develop strong business relationships across functions. * Ability to embrace change and ambiguity in a fast-paced environment, managing multiple projects in a deadline driven environment. * Strong team mindset, both within the department and cross-functionally. * Ability to work effectively in a remote team environment. * Exceptional attention to detail is critical for this role. * Discretion with confidential information. * Governance and controls mindset with the ability to build practical, scalable standards. * Collaborative approach and ability to influence through partnership rather than direct ownership of every operational task. ## Description * Own and maintain security policies, access standards, and IT governance practices across critical company systems. * Set security baselines and compliance requirements for Microsoft 365, endpoints, cloud services, SaaS platforms, and other technology tools. * Support vendor and SaaS governance through security reviews, risk assessments, contract standards, and technology intake processes. * Execute IT general controls in alignment with SOX requirements, including logical access, change management, operations, and backup/recovery controls. * Maintain audit-ready documentation, evidence repositories, control matrices, and recurring control support materials. * Coordinate ITGC testing, identify gaps, help drive remediation, and support audit requests from external auditors and advisors. * Lead access governance activities, including documented periodic access reviews for critical systems. * Define and enforce least-privilege and segregation of duties standards, particularly for financial systems and other high-risk applications. * Set standards for MFA, SSO, conditional access, and privileged access management in partnership with IT Operations. * Support security incident response, access anomaly review, and recurring control exception monitoring. * Own IT change management standards, including intake, approval, testing, logging, documentation, and evidence requirements. * Partner closely with IT Operations, Finance Systems, external consultants, and business stakeholders to translate governance requirements into practical processes. * Help expand IT governance practices as the Company grows across digital infrastructure, high-performance computing, and operational sites. ## Related Videos - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [The Sustainability Race: AI's Promises, Pitfalls and Potential](https://www.wearedevelopers.com/videos/100155-the-sustainability-race-ai-s-promises-pitfalls-and-potential) - [Crypto-secure Data Management with In-Database Blockchain](https://www.wearedevelopers.com/videos/632-crypto-secure-data-management-with-in-database-blockchain) - [Navigating the Corporate Jungle: Life as a Developer in a large Company](https://www.wearedevelopers.com/videos/621-navigating-the-corporate-jungle-life-as-a-developer-in-a-large-company) - [Building the Nervous System of AI - Michael Kagan (NVIDIA)](https://www.wearedevelopers.com/videos/2133-building-the-nervous-system-of-ai-michael-kagan-nvidia) - [Build Delightful Mobile Experiences with Kotlin, Realm, and Atlas Device Sync](https://www.wearedevelopers.com/videos/694-build-delightful-mobile-experiences-with-kotlin-realm-and-atlas-device-sync) ## Related Articles - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Now is the time for industrialized software development](https://www.wearedevelopers.com/magazine/601-now-is-the-time-for-industrialized-software-development) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [What’s the Difference between a Junior, Mid, and Senior Developer?](https://www.wearedevelopers.com/magazine/238-what-s-the-difference-between-a-junior-mid-and-senior-developer)