Manager, IT Audit & Compliance

At J.Jill, we’re redefining what it means to dress and live with ease. As a women-led, Boston-based lifestyle brand with 200+ stores nationwide, we design thoughtful, inspired apparel and accessories that celebrate the totality of all women. We’re entering an exciting chapter of growth — expanding our footprint, reaching new customers, and deepening long-standing relationships. We're seeking bold thinkers and doers to join us. With competitive pay and benefits, a supportive culture, and the chance to make a real impact, this is more than a job, it’s an opportunity to bring our ethos keep it simple, make it matter to life in new and inspiring ways.

As the Manager of IT Audit and Compliance, you will play a key role in ensuring the integrity of our IT systems, compliance with Sox, and partner to ensure successful execution of new IT implementations (System Development Life Cycle – SDLC projects). You will help assess, monitor, and enhance our IT controls, processes and procedures.

• Lead IT Sox effort over the effectiveness of internal controls including testing of IT General Controls (ITGCs), IT application controls (ITACs), key interfaces, key reports/spreadsheets, and Soc 1’s. Participate and document key IT walkthroughs in conjunction with our external auditors. Identify control deficiencies, recommend improvements, and provide guidance to key members of Management.
• Lead reviews following System Development Life Cycle controls (SDLC) for new software implementations. Partner with cross functional teams to help lead successful implementations or key system changes.
• Responsible for conducting comprehensive technology audits to evaluate effectiveness of IT controls. Includes planning, performing risk assessments, identifying controls used to manage risks, as well as developing and executing test plans to assess the adequacy and effectiveness of IT related processes and controls.
• Identifies opportunities for improving IT processes, reducing costs or improving internal controls. Work on benchmarking best in practice to enhance overall environment, including new technologies.
• Work closely with our Cyber and Privacy teams helping our teams manage ever changing risks. Stretch opportunities available to learn new areas.
• Drafts audit reports and communicates audit findings to process owners and management. Ability to work effectively with external audit.
• Communicates with Internal Audit management regarding testing status, audit issues and deadlines.
• Builds and maintains effective relationships with the various IT areas/departments.

Benefits, Tailored for You.

• Bonus eligible
• 401(k) retirement plan with discretionary match and tuition reimbursement.
• Medical, dental, vision, company paid LTD/STD, and generous amount of paid time off.
• Office includes amenities such as a café, fitness center, free parking and Red Line shuttle.
• Generous associate discount; group discounts on auto, pet and homeowner insurance.
• Discount Marketplace for travel, consumer products, food, auto buying, etc.
• Associate resource groups.

• Requires at least 5-6 years of relevant experience in internal audit, external audit (i.e., Big 4 public accounting), risk consulting, IT and/or SOX compliance, with an emphasis on IT auditing.
• Strong understanding of Sox regulations and applicable IT controls. Understanding of requirements, timing and documentation.
• Understanding of System Development Life Cycle concepts.
• Demonstrated ability to work both independently and in a team environment, with good attention to detail.
• Strong verbal and written communication skills, to effectively present to peers and management.
• Ability to think strategically and develop innovative solutions
• Ability to multi-task, problem-solve, and prioritize, in order to successfully meet deadlines.

Education

• Bachelor's degree in Computer Science, Management Information Systems, Information Security or related field of study. Experience in accounting or other business discipline is also desirable.
• Masters or Advanced Degree is a plus.
• Certified Information Systems Auditor (CISA), Certified Internal Auditor (CIA) or other IT audit or security related certification (CISSP) is preferred. PCI, CPRA, or Cyber knowledge is a plus.

Physical Requirements

• Sedentary work, prolonged periods of time working at a desk and on a computer.
• Ability to communicate information and observe details at close range.
• Light lifting may be required

The above statements are intended to describe the general nature and level of work being performed by associates assigned to this job. They are not intended to be an exhaustive list of all responsibilities, duties and skills required of this position.

At J.Jill, we believe our associates should be seen, valued, and celebrated. We support the advancement of our associates by harnessing their unique contributions to grow and improve, and our success is guided by a culture that values keeping it simple and making it matter. J.Jill is an equal opportunity employer and is committed to providing an inclusive and professional workplace free from discrimination and harassment. All employment decisions at J.Jill are based solely upon business needs, job requirements and individual qualifications without regard to race, color, religion, sex, pregnancy and pregnancy related conditions, gender identity, gender expression, national origin, sexual orientation, sexual and reproductive health decisions, age, marital status, disability, genetic information, military or veteran status or any other legally protected status. J.Jill provides reasonable accommodation to qualified individuals, in accordance with applicable laws.  If you need to inquire about an accommodation to assist with completing the application process, please email Talent.Acquisition@jjill.com.