Director, IT Audit, Controls and Compliance

Company Description

Zayo provides mission-critical bandwidth to the world’s most impactful companies, fueling the innovations that are transforming our society. Zayo’s 141,000-mile network in North America and Europe includes extensive metro connectivity to thousands of buildings and data centers. Zayo’s communications infrastructure solutions include dark fiber, private data networks, wavelengths, Ethernet, and dedicated Internet access. Zayo serves wireless and wireline carriers, media, tech, content, finance, healthcare and other large enterprises.

Zayo is seeking a Director, IT Controls and Compliance to be responsible for developing, implementing, and maintaining a robust IT control framework and ensuring compliance with relevant laws, regulations, and industry standards across the organization’s IT systems and operations.This individual will Direct a team of Controls and Compliance specialists to ensure all audit and regulatory requirements are met.

Responsibilities:

• Leads a team of Managers and High level Professional Individual Contributors in IT Audit, Controls, Compliance and Risk Management.

• Develop, execute, and lead the implementation of an effective IT control framework, including policies, procedures, and standards, to ensure the confidentiality, integrity, and availability of IT systems and data.

• Collaborate with Internal and External Audit partners, business units, Technology leaders and other stakeholders to identify and assess IT risks, and design appropriate controls to mitigate those risks.

• Partner with other leaders to establish and maintain an IT compliance program to ensure adherence to relevant laws, regulations, and industry standards (e.g., SOX, GDPR, PCI-DSS, ISO 27001.)

• Communicate health of Controls and Compliance measures with senior leaders and investor representatives.

• Manage the execution of regular IT control assessments, audits, and testing to evaluate the effectiveness of existing controls and identify areas for improvement.

• Guide the team in developing and delivering IT control and compliance training programs to enhance awareness and understanding across the organization.

• Oversee the development and maintenance of IT control documentation, including control objectives, control activities, and testing procedures.

• Accountable for the IT control self-assessment (CSA) process, ensuring timely completion and accurate reporting of control activities.

• Collaborate with the GRC team in the development and improvement of tools used in association with audit and compliance activity.

• Collaborate with internal and external auditors, regulatory bodies, and third-party service providers to facilitate IT control and compliance reviews and audits.

• Provide leadership, guidance, and support to IT teams and business units on control design, implementation, and remediation activities.

• Stay current with emerging trends, regulatory changes, and industry best practices related to IT controls and compliance.

• Inspires and cultivates a value-driven company culture.

Qualifications:

• Bachelor’s degree in Computer Science, Information Systems, or a related field; advanced degree or relevant certifications (e.g., CISA, CISSP, CISM) are preferred.

• Minimum of ten (10) years of experience in IT controls, compliance, risk management, or related areas, with at least six (6) years in a leadership role.

• Proven knowledge and practical experience with IT control frameworks (e.g., COBIT, NIST, ISO), compliance standards (e.g., SOX, GDPR, PCI-DSS, HIPAA), and industry best practices.

• Strong understanding of IT systems, infrastructure, applications, and data management practices.

• Excellent analytical and problem-solving skills, with the ability to analyze complex data and identify risk areas.

• Exceptional communication and interpersonal skills, with the ability to effectively collaborate with cross-functional teams and stakeholders.

• Proven project management skills, with the ability to manage multiple initiatives and prioritize responsibilities.

• Leadership and team management experience, with the ability to motivate and develop a high-performing team.

• Knowledge of relevant laws, regulations, and industry standards related to IT controls and compliance.

Base Salary Range: $137,600 – $196,550 USD/annually, commensurate with experience.

Benefits, Rewards & Wellness

• Excellent Health, Dental & Vision Insurance

• Retirement 401(k) Savings Plan

• Fitness membership discounts

• Generous paid time off policy including paid parental leave

Zayo provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, provincial or local laws.

This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.