Job Description:Are you an accomplished technology risk, security, and compliance leader ready to shape how a major enterprise protects the integrity of its financial reporting and technology environment? Join us as
Director, Technology SOX Controls and Compliance, where you'll set the vision for a modern, risk-based controls program and lead the strategy, governance, and evolution of our Sarbanes-Oxley (SOX), IT General Controls (ITGC), and technology security compliance programs. You'll have the opportunity to influence enterprise risk strategy, strengthen critical technology controls, and advance how emerging technologies such as cloud, automation, and artificial intelligence are governed across the organization.
This position is in Richmond, VA with a hybrid work schedule. We will consider a remote working option for the ideal applicant.In this newly built position, you'll guide and develop the individual responsible for Technology and Security Compliance at the senior manager level and their team. You will also serve as a trusted advisor to senior leaders, Internal Audit, External Audit, and key business and technology collaborators. You'll bring deep SOX and ITGC expertise, broad technology risk and security knowledge, and the executive presence to drive a forward-looking compliance strategy across a sophisticated enterprise environment.
What you will be doing: - Setting the strategy, multi-year roadmap, and operating model for enterprise SOX, ITGC, and technology compliance programs, aligning controls with business priorities, regulatory expectations, and the enterprise risk management framework.
- Leading, coaching, and developing the Senior Manager, Technology and Security Compliance and the broader controls team, building succession depth, strengthening accountability, and fostering a high-performing, continuous-learning culture.
- Providing executive oversight across the full annual SOX lifecycle, including scoping, risk assessment, control design, testing readiness, deficiency evaluation, remediation, and management certification, while ensuring timely and high-quality outcomes.
- Serving as the primary technology compliance liaison to External Audit, Internal Audit, the Disclosure Committee, and other governance forums, presenting control health, key risk themes, and deficiency assessments to senior leaders and, as needed, the Audit Committee.
- Fostering compliance modernization through continuous controls monitoring, GRC automation, data analytics, and the responsible use of artificial intelligence to improve control effectiveness, efficiency, and transparency.
- Assessing the control and compliance implications of emerging technologies, including AI and machine learning, generative AI, cloud and SaaS platforms, robotic process automation, and modern DevOps and CI/CD pipelines, embedding appropriate governance and risk treatment from the start.
- Aligning technology compliance with security and governance frameworks, including NIST CSF, ISO 27001, COBIT, CIS Controls, NIST AI RMF, and ISO/IEC 42001, while driving control rationalization across Technology, Cybersecurity, Finance, business operations, transformation programs, M&A, and third-party relationships.
- Supervising technology safeguards that support financial reporting, including identity and privileged access management, user access reviews, updates coordination, infrastructure and cloud operations, job scheduling, backups, logging, and monitoring, while establishing executive reporting, program metrics, budgets, resourcing, and external partner governance.
We want you to have: - Bachelor's degree in Accounting, Information Systems, Cybersecurity, Computer Science, Finance, or a related field; Master's degree, such as an MBA or MS in Information Systems or Cybersecurity, strongly preferred.
- 15+ years of dynamic experience across SOX compliance, ITGCs, IT audit, technology risk, information security, internal audit, or related disciplines, including considerable experience leading SOX/ITGC programs within a Fortune 500 or comparably sized public company.
- 8+ years of people leadership experience, including leading leaders, building and scaling controls or audit teams, leading budgets and external partners, and operating within a complex global or multinational organization; Big Four or public accounting audit experience is a plus.
- Expert knowledge of SOX 302/404, PCAOB auditing standards, ITGCs, automated and application controls, IT-dependent manual controls, control dependency mapping, COSO 2013, deficiency evaluation and aggregation, remediation governance, and management response development.
- Proven command of technology operations and security controls related to financial reporting, covering IAM, PAM, user access reviews, change management, infrastructure operations, AWS, Azure or GCP cloud environments, SaaS and ERP platforms such as SAP, Oracle, and Workday, logging, monitoring, backups, and job scheduling.
- Solid understanding of security and governance frameworks, including NIST CSF, ISO 27001, COBIT, and CIS Controls, along with familiarity with SOC 1/SOC 2 reporting, third-party risk management, and emerging AI governance frameworks.
- Demonstrated experience modernizing compliance programs through automation, continuous controls monitoring, GRC platforms such as ServiceNow IRM, AuditBoard, or OneTrust, and data analytics, with a strong perspective on governing artificial intelligence and other emerging technologies.
- Validated executive presence and ability to influence C-suite leaders, Audit Committee members, and external auditors, combined with audit/risk certification such as CISA, CPA, CIA, CRISC, or CRMA and security certification such as: CISSP, CISM, or CCSP; additional credentials such as CGEIT, ISO 27001 Lead Auditor, CCSK, IAPP AIGP, or ISACA AAIA preferred.
As a People Leader at Altria, you are accountable for both results and the experience of your team. You drive alignment by connecting strategy to daily work, and you model collaboration by embracing diverse perspectives. By creating trust, offering feedback, and leading with authenticity, you help strengthen Altria's culture and deliver meaningful outcomes. The starting salary is based on but not limited to experience, knowledge, and qualifications in determining compensation decisions. The Salary Range for this position is: $139,100.00 - $243,500.00.
Why You'll Love Building Your Career at Altria At Altria, we believe a great career starts with feeling supported - both at work and in life. Here's what you'll find here:
- Work where connection and flexibility meet - enjoy the benefits of in-person collaboration three days a week (Tuesday - Thursday), while maintaining the flexibility to work remotely on Mondays and Fridays. Our hybrid approach empowers you to stay connected, collaborate with colleagues, and manage your schedule in a way that works best for you.
- Own your time - start with 15 days of paid time off, 13 paid holidays, 2 floating holiday days, and a 37.5-hour workweek so you can recharge and live fully.
- A place where you belong - where your ideas are welcomed, your growth is encouraged, and your impact is real.
- Get recognized for your work - annual merit increases and performance bonus.
- A future you can count on - 401(k) matching from day one; plus Deferred Profit Sharing, an annual company contribution in an amount equal to 13%-17% of your base salary.
- Help with your goals - get help with student loan repayment assistance, attend a conference, or gain a new certification with professional development stipends.
- Support for what matters most - comprehensive medical, dental, and vision coverage for you and your family.
- Celebrating your milestones - paid parental and bonding leave for life's biggest moments.
- Wellness that goes beyond work - programs that care for your whole well-being at whatever stage you are in your life.
- A culture that gives back - paid volunteer days and a shared commitment to making a difference.
At Altria, we offer more than benefits - we offer a career that fits your life, rewards your ambition, and celebrates your impact. This position is not eligible for sponsorship.
Altria is a Fortune 500 company that has a leading portfolio of products for U.S. adult tobacco and nicotine consumers 21+. For decades we've been leaders in the tobacco industry, but the industry is evolving - and so are we. Our Vision is Moving Beyond Smoking™. At Altria, we celebrate the power of diverse teams working together to shape our future. Each Altria company is an equal opportunity employer. We are committed to providing individuals with criminal records, including formerly incarcerated individuals and individuals with conviction records, a fair chance at employment. Join us as we work together to shape a better future for adult tobacco consumers, our employees, and our shareholders. Altria is the parent company of Philip Morris USA, John Middleton, U.S. Smokeless Tobacco, Helix Innovations, and NJOY. Altria complements its tobacco portfolio with equity investments in Anheuser-Busch InBev and Cronos Group. Learn more about Altria at www.altria.com and follow us on LinkedIn . 
