IT Compliance Sr. Manager

Driven Brands™, headquartered in Charlotte, NC, is the largest automotive services company in North America, providing a range of consumer and commercial automotive services, including paint, collision, glass, vehicle repair, oil change, maintenance, and car wash. Driven Brands is the parent company of some of North America’s leading automotive service businesses including Take 5 Oil Change®, Meineke Car Care Centers®, Maaco®, 1-800-Radiator & A/C®, Auto Glass Now®, and CARSTAR®. Driven Brands has approximately 4,800 locations across the United States and 13 other countries, and services tens of millions of vehicles annually. 

JOB DESCRIPTION:

Job Details – IT SOX Compliance Sr Manager Position

Headquartered in Charlotte, NC, Driven Brands (NASDAQ: DRVN) is the largest automotive services company in North America, providing a range of consumer and commercial automotive needs, including paint, collision, glass, vehicle repair, oil change, maintenance, and int’l car wash.

With over 4,500 centers in 15 countries, Driven Brands is the parent company of some of North America’s leading automotive service brands including Take 5 Oil Change, Driven Glass, Meineke, Maaco, CARSTAR, and more. Our network services over 50 million vehicles annually and generates more than $5 billion in system-wide sales each year.

The IT SOX Compliance Sr Manager position is responsible for effectively managing and executing Driven Brands’ IT SOX Compliance program in alignment with Sarbanes-Oxley (SOX) requirements across the organization as a trusted, respected and compliance partner with all key stakeholders.  The Sr Manager is responsible for designing, implementing, and monitoring internal controls over financial reporting (ICFR) from an IT perspective to ensure compliance with regulatory and audit standards.  This includes demonstrating expertise in all IT General Controls (ITGCs) areas and IT best practices and effectively communicating and implementing these throughout the entire organization.

RESPONSIBILITIES:

• Manage and assist with the development and maintenance of IT SOX documentation (process narratives, flowcharts, risk control matrices, etc.) across all in-scope SOX systems, applications and infrastructure, and for other non in-scope areas as preparation for IT SOX compliance.
• Ensure all ITGC control activities are designed effectively and continuously monitor for operating effectiveness.
• Regularly coach ITGC control owners with necessary changes when a control is deemed not operating effective, or when the control environment is changing with respect to people, processes or technology.
• Assist with the creation of management responses and due dates for effective and timely remediation solutions.
• Participate in audit, certification and compliance events, including sample and evidence gathering and delivery.  Act as a liaison between auditors and ITGC control owners to enhance understanding and timely deliverables.
• Assist with the administration of successful completion of UAR’s (User Access Reviews) and SOC Reviews (Service Organization Controls reviews for SaaS vendors).
• Assist with tracking IT SOX program KPIs.
• Work closely with all IT areas and other functional teams to ensure controls and compliance requirements for all ITGC objectives are clearly defined and implemented.
• Continuously evaluate the overall IT control environment to identify and mitigate risk and regularly. 
• Manage and/or execute successful and timely completion of other assigned tasks for Driven Brands’ IT Compliance Program, and IT Compliance enhancements and projects across the organization.

MINIMUM QUALIFICATIONS

• Minimum of 10 years of experience in IT audit, IT compliance, IT SOX compliance with a thorough understanding of all ITGC control objectives.
• Minimum of 3-5 years in an IT SOX manager capacity.
• Strong understanding of SOX Section 404, COSO framework, and IT control frameworks such as COBIT or NIST.
• Ability to manage cross-functional teams and communicate effectively with technical and non-technical stakeholders.
• Experience with GRC platforms and audit tools, e.g. Oracle GRC, AuditBoard, etc.
• Experience with cloud environments and SaaS solution SOC evaluations, e.g. AWS, GCP, Azure, etc.
• Experience with ERP systems, e.g. Oracle, SAP, Workday, etc.
• Experience with IT Tools and infrastructure, e.g. password vaults, ticketing systems, Single Sign-On, Active Directory, data warehouses, etc.
• Ability to advise, collaborate, and work in a team environment.
• Ability to successfully effect change management within the organization.
• Highly organized, efficient, meets deadlines and attention to detail.
• Takes ownership, manages and executes using high-performance attributes.

EDUCATION

Bachelor’s degree in Information Systems, Accounting, Finance, or related field

CERTIFICATIONS/TRAINING (At least one required)

• Certified Information System Auditor (CISA)
• Certified Internal Auditor (CIA)
• Certified Public Accountant (CPA)
• ITIL, CRISC, or similar risk-focused credentials

#DBCORP

#LI-LW1

#REMOTE

Position Location:

Compensation Range:

Compensation Frequency:

Base pay offered may vary depending on actual location, job-related knowledge, skills, and experience. Supplemental pay types may include commissions or bonus incentives, depending on the role. Driven Brands offers a variety of health and wellness benefits including paid time off and holiday pay. Details regarding our benefits can be found here: https://www.drivenbrandsbenefits.com