IT Compliance Manager/HYBRID

$82,670 - $129,910/Yr

MSC Industrial Direct - Davidson, NC

Full-time - Mid Level

Davidson, NC

5,001-10,000 employees

Merchant Wholesalers, Durable Goods

About the position

The IT Compliance Manager at MSC Industrial Supply Co. is responsible for overseeing and managing the company's IT General Controls (ITGC) compliance program. This role involves ensuring adherence to relevant standards, internal policies, and audit requirements, while minimizing the impact on product development. The ideal candidate will possess a strong background in IT compliance, risk management, and audit processes, and will work collaboratively across departments to maintain compliance and foster a culture of accountability.

Responsibilities

• Develop, implement, and maintain the IT compliance program to support organizational objectives.
• Ensure compliance with relevant regulations such as SOX, GDPR, and HIPAA, as well as industry standards like COSO and GAAS.
• Conduct regular risk assessments and audits to identify and mitigate compliance risks.
• Collaborate with internal and external auditors to facilitate IT audits and assessments.
• Monitor and report on compliance metrics and key performance indicators (KPIs).
• Stay updated with changes in regulations and industry standards, adjusting compliance programs as necessary.
• Work closely with IT, legal, and other departments to ensure a cohesive compliance approach.
• Translate security and compliance requirements into actionable tasks and develop plans to support development.
• Perform assessments of policies, processes, systems, and issues to identify areas of non-compliance.
• Provide guidance and support to control owners to ensure understanding and compliance with requirements.
• Foster the MSC Culture within the department and throughout the company.
• Participate in special projects and perform additional duties as required.

Requirements

• Bachelor's degree in Information Technology, Computer Science, or a related field.
• Minimum of 5 years of experience in IT compliance, risk management, or audit.
• Relevant certifications such as CISA, CISSP, or CISM are a plus.
• Strong understanding of regulatory frameworks such as SOX and PCI.
• Excellent communication and interpersonal skills.
• Ability to work independently and manage multiple tasks simultaneously.
• Strong analytical and problem-solving skills.
• Experience with compliance management tools and software is a plus.
• Strong organizational skills.

Nice-to-haves

• Certification in Information Security or Compliance (e.g., CISM, CISA).
• Experience working in a fast-paced, dynamic environment.
• Familiarity with risk management and privacy practices.

Benefits

• Training and professional development opportunities.
• Associate Inclusion Circles for various communities.
• Programs to support health, well-being, and financial future.