Manager, IT Audit & Compliance

About Us

Foundation Building Materials (FBM) is a leading construction materials distribution company serving the commercial and residential construction markets across United States and Canada. In conjunction with Unified Door & Hardware Group (UDHG), a premier provider of commercial door, frame, and hardware solutions, FBM supports a broad range of construction and architectural projects nationwide. Together, FBM and UDHG's 8,000+ Team Members are committed to operational excellence, innovation, and employee development. By combining scale, specialty expertise, and a customer-first mindset, we deliver high-quality products and services to contractors, builders, and project teams across diverse markets. As the organization continues to grow and evolve, we are investing in strong, forward-thinking talent to support our long-term success.

Responsibilities

• Plan, execute, and manage IT audits to evaluate the design and effectiveness of internal controls, security measures, and operational processes.
• Demonstrated experience managing and testing SOX controls within a publicly traded company, ensuring compliance with financial and IT regulatory requirements.
• Conduct risk assessments to identify gaps and vulnerabilities in IT systems and processes.
• Conduct 3rd-party risk assessments to identify gaps and vulnerabilities in IT systems and processes with vendors in accordance with NIST.
• Develop and maintain audit plans aligned with business priorities and regulatory changes.
• Track, monitor, and report remediation efforts from audit findings and ensure timely closure.
• Ensure adherence to regulatory requirements (e.g., SOX, NIST, PCI).
• Ensure adherence to PCI-DSS 4.0 regulatory requirements, with scope reductions (segmentation, iFrame, and P2PE).
• Manage IT compliance frameworks, policies, and procedures to maintain robust governance.
• Collaborate with legal, finance, and business stakeholders to ensure compliance across systems and processes.
• Stay updated on regulatory changes and assess their impact on IT and business operations.
• Lead and manage tax audits, inquiries, and examinations by US federal, state, and Canadian tax authorities.
• Mitigate tax risks through proactive monitoring, internal controls, and process improvements.
• Coordinate with external auditors and advisors regarding tax-related matters.
• Lead and mentor the IT audit and compliance team.
• Partner with IT and security teams to promote best practices in information security and data protection.
• Serve as the primary liaison with external auditors, regulators, and third-party assessors.
• Provide senior management with reports, insights, and recommendations to strengthen compliance posture.
• Perform other duties as assigned to support IT and Corporate objectives.

Qualifications

• Bachelor's degree in Information Systems, Computer Science, Accounting, or related field (Master's preferred).
• CISA, CISM, CISSP, CRISC, or similar highly desirable.
• 7+ years in IT audit, compliance, or risk management roles.
• Strong understanding of IT general controls, cybersecurity frameworks, and regulatory requirements.
• Proven experience managing audits and compliance projects in large organizations.
• Excellent analytical, problem-solving, and organizational skills.
• Strong communication skills to engage both technical and non-technical stakeholders.
• Ability to manage multiple priorities in a fast-paced environment.

Pay

• Base: $130,000 - $150,000 per Year
• Bonus: 20% Target Bonus
• Total Compensation (Base + Bonus): $150,000 - $190,000

Benefits

• Medical
• Dental
• Vision
• HSA/ FSA plans
• Voluntary Life and Accidental Death & Dismemberment (AD&D) Insurance
• Critical illness, Hospital Indemnity, Accident Coverage
• Legal Insurance Plan
• Paid Time Off & Paid Holidays
• Generous 401(k) plan with company match