Senior Manager, Corporate IT Security & Compliance

Live Nation Worldwide, Inc. is hiring a Senior Manager to lead Corporate IT compliance, governance, risk management, and audit programs. The role oversees IT controls and audit relationships, supports regulatory and cybersecurity compliance, and advises technology and business leaders on risk and control improvements.

Responsibilities:

• Develop and execute the Corporate IT SOX compliance strategy, ensuring alignment with organizational objectives, regulatory requirements, and industry best practices
• Establish and maintain governance processes supporting the full IT control lifecycle, including control design, implementation, testing, monitoring, remediation, and continuous improvement
• Conduct enterprise-wide IT risk assessments to identify financially significant applications, infrastructure, automated controls, and technology dependencies supporting key business processes and financial reporting
• Define and maintain risk-based compliance frameworks that align technology initiatives with regulatory, operational, and business objectives
• Establish escalation protocols and issue management processes to proactively identify, assess, prioritize, and remediate control deficiencies and technology risks
• Assess emerging technologies, cloud platforms, AI-enabled solutions, and digital transformation initiatives for security, compliance, and operational risks
• Oversee the design, implementation, and monitoring of IT General Controls (ITGCs), IT Application Controls (ITACs), automated controls, interface controls, and key IT-dependent business process controls
• Evaluate control design and operating effectiveness across key technology domains, including:
• Assess financial reporting risks associated with ERP systems, cloud platforms, SaaS applications, integrations, and supporting infrastructure
• Provide subject matter expertise on SOX 404, Internal Control over Financial Reporting (ICFR), COSO, COBIT, SOC 1, SOC 2, NIST, ISO 27001, and other applicable governance and security frameworks
• Support vulnerability management, security assessments, and compliance monitoring initiatives by providing guidance on control design and effectiveness
• Collaborate with Cybersecurity, Infrastructure, Enterprise Applications, Finance, Legal, and Internal Audit teams to strengthen the overall control environment
• Lead the planning, execution, and oversight of IT SOX audits, including walkthroughs, risk assessments, control testing, evidence review, and documentation management, in partnership with the IT Internal Audit team
• Serve as the primary liaison between Corporate IT and external auditors, Internal Audit and compliance stakeholders
• Coordinate audit requests, walkthroughs, evidence collection, testing activities, issue remediation, and management responses
• Ensure audit readiness through the maintenance of high-quality, inspection-ready documentation, control narratives, risk assessments, and evidence repositories
• Support auditor reliance through disciplined testing methodologies, reporting practices, and governance processes
• Partner with Internal Audit to develop risk-based audit plans and support broader enterprise governance initiatives
• Track audit findings, control deficiencies, and remediation efforts to ensure timely and sustainable resolution
• Serve as a trusted advisor to executive leadership by translating complex technology, security, and compliance risks into actionable business recommendations
• Build strong relationships with technology, finance, legal, cybersecurity, and business stakeholders to drive compliance and risk management objectives
• Lead cross-functional and geographically distributed teams responsible for compliance programs, audits, risk assessments, and remediation initiatives
• Establish execution standards, quality assurance processes, performance metrics, and governance reporting for compliance and audit activities
• Develop and deliver compliance awareness and training programs to promote accountability and a culture of compliance across the organization
• Mentor and develop team members while fostering a collaborative, inclusive, and high-performance work environment
• Drive continuous improvement initiatives to enhance the efficiency, scalability, and effectiveness of compliance, governance, and audit programs
• Prepare and present executive-level reports, dashboards, and presentations on compliance status, audit findings, risk exposure, remediation progress, and emerging risks
• Communicate complex technical and regulatory concepts effectively to both technical and non-technical audiences

Requirements:

• Bachelor's degree in Information Technology, Computer Science, Information Systems, Accounting, Finance, Cybersecurity, or a related field
• 8–15+ years of progressive experience in Information Technology, IT Audit, IT Risk Management, Cybersecurity, Compliance, or related disciplines
• Minimum 5–7 years of direct experience leading SOX compliance, IT audit, risk management, or governance programs within a publicly traded company, Big Four accounting firm, or consulting organization
• Demonstrated experience leading enterprise SOX 404, ICFR, SOC 1, and SOC 2 compliance programs in complex, multi-system environments
• Experience managing external audit relationships, regulatory examinations, and audit readiness initiatives
• Proven track record leading large-scale, multi-workstream compliance and audit programs
• Experience leading cross-functional and globally distributed teams
• Demonstrated success driving remediation programs, strengthening control environments, and influencing organizational change
• Sarbanes-Oxley (SOX)
• Internal Control over Financial Reporting (ICFR)
• IT Risk Management Methodologies
• SOC Reporting Frameworks
• IT General Controls (ITGCs)
• IT Application Controls (ITACs)
• Identity & Access Management (IAM)
• Change Management & SDLC Controls
• Data Governance & Technology Operations Controls
• Vulnerability Assessment & Security Monitoring Tools
• Cloud Security and Compliance Controls
• AI Governance and Emerging Technology Risk Assessments
• ServiceNow and GRC Platforms
• Exceptional leadership, collaboration, and stakeholder management skills
• Strong executive presence with experience presenting audit, compliance, security, and risk topics to senior leadership and Audit Committees
• Excellent written and verbal communication skills with the ability to translate technical risks into business-focused recommendations
• Strong analytical, problem-solving, and decision-making abilities
• Proven ability to manage multiple priorities and deliver results in a fast-paced environment
• Demonstrated success building trusted relationships across business, technology, audit, and executive leadership teams
• Master's degree
• Certified Information Systems Auditor (CISA)
• Certified Information Systems Security Professional (CISSP)
• Certified Public Accountant (CPA)
• Certified in Risk and Information Systems Control (CRISC)
• Certified Information Security Manager (CISM)
• Oracle Cloud
• OneStream
• Databricks
• SAP Business One (SAP B1)
• Salesforce
• Oracle Database
• Active Directory / Microsoft Entra ID