Director, IT Risk and Controls

Sedgwick

Director IT Risk and Controls leading governance activities for IT risk, compliance, and financial reporting at Sedgwick. Liaison between Technology, Finance, and Audit stakeholders to strengthen controls and compliance.

Posted 7/28/2026full-timeRemote • California, Minnesota, Tennessee, Texas • 🇺🇸 United StatesLeadWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in IT Risk Management, IT SOX Compliance, and Technology Governance, with a strong focus on risk assessments, control design, and governance documentation. Proven ability to lead enterprise risk and control activities while advising on effective control execution and reporting.

Highest-signal resume keywords

IT Risk ManagementIT SOX ComplianceCISA CertificationControl DesignGovernance Reporting

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

ITGCsAutomated ControlsRisk AssessmentsControl DocumentationControl InventoriesSegregation of DutiesEvidence RequirementsContinuous MonitoringOperational MetricsRisk Identification

Soft Skills

LeadershipAdvisory SkillsCommunication

Certifications & Qualifications

CISACPACRISCCIACISSP

Industry Keywords

GovernanceControl EffectivenessRisk ExposuresRemediation ActivitiesExecutive Reporting

About the role

Key responsibilities & impact

Leads the enterprise IT risk and control governance program, encompassing SOX, ITGCs, and broader technology risk and control activities, including IT risk assessments, control scoping and design, framework governance, and management reporting
Directs governance operations, including risk assessments, control documentation, issue management processes, governance reporting, control inventories, repositories, and executive reporting to support effective program administration and leadership decision-making
Serves as the senior subject matter expert for IT SOX compliance, ITGCs, automated controls, key reports, interfaces, end-user computing controls, third-party dependencies, and other technology controls supporting business and financial reporting objectives
Owns and maintains risk and control governance documentation, including narratives, RCMs, control descriptions, policies, standards, evidence requirements, control-owner guidance, and system inventories
Advises control owners and Technology leaders on risk identification, control design, segregation of duties, evidence requirements, compensating controls, and sustainable control execution
Partners with the IT Compliance function by providing program context, documentation, reporting, and management input while maintaining appropriate separation from independent assurance, testing, and remediation oversight activities
Monitors and reports on control effectiveness using attestations, operational metrics, continuous monitoring results, and assurance inputs; identifies trends, recurring risk themes, and matters requiring leadership attention
Maintains governance visibility of control deficiencies, risk exposures, and related remediation activities for reporting and management awareness while independent oversight and validation remain the responsibility of the IT Compliance function

Requirements

What you’ll need

Advanced degree in Accounting, Finance, Information Systems, Business or a related field from an accredited college or university preferred
CISA certification strongly preferred
Additional certifications such as CPA, CRISC, CIA, CISSP, or equivalent are beneficial
Ten (10) years of related, progressive experience in IT risk management, IT controls, IT SOX compliance, technology governance, or IT audit, including significant leadership of enterprise risk and control activities in a complex organization or equivalent combination of education and experience required
Demonstrated experience assessing technology risks; scoping systems and dependencies; and designing or advising on ITGCs, automated controls, key reports, interfaces, third-party controls, and other risk-mitigating controls highly preferred

Benefits

Comp & perks

Health insurance
Retirement plans
Paid time off
Flexible work arrangements
Professional development
Bonuses
Equipment allowances
Wellness programs