GRC SOX IT Compliance - Technical Product Manager

Technical Product Manager – GRC & SOX IT ComplianceCosta Rica - Remote Job SummaryWe are seeking an experienced Technical Program Manager (TPM) to lead Governance, Risk, and Compliance (GRC) initiatives with a strong focus on SOX IT Compliance.This role will partner closely with Engineering, IT, Security, Internal Audit, Finance, and external auditors to establish, maintain, and continuously improve IT controls and compliance programs.The ideal candidate combines strong technical knowledge, program management expertise, and regulatory compliance experience.Key ResponsibilitiesLead enterprise-wide SOX IT compliance programs and ensure timely execution of all compliance activities.Manage annual SOX ITGC (IT General Controls), ITAC (IT Application Controls), and key report testing programs.Coordinate with Internal Audit, External Audit, Finance, Security, and Engineering teams throughout audit cycles.Drive remediation of control deficiencies by partnering with technical teams and tracking corrective actions to closure.Develop and maintain compliance roadmaps, project plans, milestones, risks, and status reporting.Implement and optimize Governance, Risk, and Compliance (GRC) processes and tools.Ensure documentation of policies, standards, procedures, risk assessments, and control evidence.Manage User Access Reviews (UAR), Segregation of Duties (SoD), Change Management, Logical Access, Backup & Recovery, and Incident Management controls.Support SOC 1, SOC 2, ISO 27001, PCI DSS, and other compliance initiatives where applicable.Identify opportunities to automate evidence collection and compliance workflows.Facilitate cross-functional meetings and executive-level reporting on compliance status, risks, and audit readiness.Track KPIs and metrics related to compliance health, remediation progress, and audit findings.Stay current with evolving regulatory requirements and industry best practices.Required QualificationsBachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related field.10+ years of experience in Technical Program Management, IT Audit, IT Compliance, or Information Security.5+ years of experience managing SOX IT Compliance programs.Strong understanding of:SOX ITGCIT Application Controls (ITAC)Risk AssessmentChange ManagementIdentity & Access Management (IAM)SDLC ControlsCloud Security ControlsExperience working with Internal and External Auditors.Strong project and program management skills.Experience managing cross-functional technical initiatives.Excellent communication and stakeholder management skills.Preferred QualificationsExperience with cloud platforms (AWS, Azure, or Google Cloud).Experience with SaaS environments.Knowledge of DevOps and CI/CD processes.Familiarity with GRC platforms such as ServiceNow GRC.