Manager, IT Risk & Controls

At H&P, our people are our strength.

At H&P, our people are our strength.

At a Glance:

The Manager of IT Risk and Controls is a highly motivated and experienced manager capable of implementing new initiatives and aligning teams and corporate strategy. This individual will develop and execute the plan to transform our IT Risk and General Controls processes and team. The role will be accountable for the successful execution of year-round SOX compliance activities. Additionally, the Manager of IT Risk & Controls will lead the IT Risk practice, ensuring that H&P’s IT Risks are identified, tracked, and mitigated. The manager will develop data-driven reporting and dashboards to ensure alignment and communication with key stakeholders.

Location: Tulsa, OK

Work Type: Hybrid

#LI-Hybrid

What you will do:

Strategy Development and Execution:

• Develop and execute a comprehensive strategy to transform IT Risk and General Controls processes.
• Lead and mentor the IT Risk & Controls team to achieve strategic goals.
• Foster a culture of continuous improvement and innovation within the team.

SOX Compliance:

• Oversee the successful execution of year-round SOX compliance activities.
• Ensure all General IT Controls (GITC) are documented, , and compliant with regulatory standards.
• Collaborate with internal and external auditors to facilitate SOX audits and reviews.

Data-Driven Reporting and Dashboards:

• Develop and maintain data-driven reporting and dashboards to monitor IT Risk and General Controls.
• Ensure accurate and timely communication of risk and control status to key stakeholders.
• Utilize analytics to provide insights and recommendations for risk mitigation and control improvements.

IT Risk Management:

• Lead the IT Risk practice, ensuring that IT Risks are identified, tracked, and mitigated.
• Develop and maintain an IT Risk Register, ensuring risks are prioritized and addressed.
• Conduct regular risk assessments and provide guidance on risk mitigation strategies.

Stakeholder Engagement:

• Build and maintain strong relationships with key stakeholders and leaders across the organization.
• Communicate IT Risk and General Controls strategies, progress, and outcomes effectively.
• Collaborate with other departments to ensure alignment and integration of risk and control activities.

What you need:

• Bachelor’s degree in Information Technology, Business Administration, or a related field.
• Minimum of 7 years of experience in IT risk management, IT controls, and SOX compliance.
• 2 years of experience in leading similar teams and/or prior H&P experience in a similar line of work
• Proven track record of developing and executing IT Risk and General Controls strategies.
• Strong knowledge of SOX compliance requirements and IT risk management frameworks.
• Excellent leadership and team management skills.
• Strong analytical and problem-solving abilities.
• Exceptional communication and interpersonal skills.
• Ability to work in a fast-paced, dynamic environment and manage multiple priorities.
• Highly motivated, self-starting individual

Not a must, but a plus:

• Professional certifications such as CISA, CRISC, or similar.
• Experience with data analytics tools and platforms.
• Knowledge of regulatory requirements and industry standards related to IT risk and controls.

H&P is committed to employing a diverse workforce. Qualified applicants will receive consideration without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity, gender expression, veteran status, or disability.

Thank you for your interest in joining our team!

Thank you for your interest in joining our team!