IT Compliance Manager/HYBRID

$82,670 - $129,910/Yr

MSC Industrial Direct - Davidson, NC

Full-time - Mid Level

Davidson, NC

5,001-10,000 employees

Merchant Wholesalers, Durable Goods

About the position

The IT Compliance Manager at MSC Industrial Supply Co. is responsible for overseeing and managing the IT General Controls (ITGC) compliance program. This role ensures adherence to relevant standards, internal policies, and audit requirements, while minimizing the impact on the product development lifecycle. The ideal candidate will possess a strong background in IT compliance, risk management, and audit processes, and will work collaboratively across departments to maintain compliance and foster a culture of integrity within the organization.

Responsibilities

• Develop, implement, and maintain the IT compliance program that supports the organization's objectives.
• Ensure compliance with relevant regulations (e.g., SOX, GDPR, HIPAA) and industry standards (e.g., COSO, ISAKA, GAAS).
• Conduct regular risk assessments and audits to identify and mitigate compliance risks.
• Collaborate with internal and external auditors to facilitate IT audits and assessments.
• Monitor and report on compliance metrics and key performance indicators (KPIs).
• Stay up-to-date with changes in regulations and industry standards and update compliance programs accordingly.
• Work closely with IT, legal, and other departments to ensure a cohesive approach to compliance.
• Translate security and compliance requirements into tasks, prioritize tickets, remove blockers, and develop plans and roadmaps to support development.
• Perform assessments of policies, processes, systems, and issues to identify areas of non-compliance.
• Collaborate with functional and business leads to understand and address compliance requirements.
• Provide guidance and support to control owners to ensure they understand and can meet compliance requirements.
• Foster the MSC Culture in the department and throughout the company to ensure fulfillment of MSC's vision and unity of purpose.
• Participate in special projects and perform additional duties as required.

Requirements

• Bachelor's degree in Information Technology, Computer Science, or a related field.
• Minimum of 5 years of experience in IT compliance, risk management, or audit.
• Relevant certifications (e.g., CISA, CISSP, CISM) are a plus.
• Strong understanding of regulatory frameworks such as SOX, PCI, and others.
• Excellent communication and interpersonal skills.
• Ability to work independently and manage multiple tasks simultaneously.
• Strong analytical and problem-solving skills.
• Experience with compliance management tools and software is a plus.
• Strong organizing skills.

Nice-to-haves

• Certification in Information Security or Compliance (e.g., CISM, CISA).
• Experience working in a fast-paced, dynamic environment.
• Familiarity with risk management and privacy practices.

Benefits

• Training and professional development opportunities.
• Associate Inclusion Circles: Women, Pride, Black, Veterans, HOLA and DisABLEd.
• Programs to support health, well-being, and financial future.