{"id":4081417,"url":"https://alion.io/job/sas-institute-it-auditor-program-manager-grc-a","title":"IT Auditor - Program Manager, GRC -A","company":{"id":3454,"name":"SAS Institute","domain":"sas.com","url":"https://alion.io/company/sas","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"iCIMS","truth_index":{"grade":"A","score":95,"open_postings":3,"ghost_share":0,"stale_share":0,"repost_share":0.667,"time_to_fill_p50_days":19,"computed_at":"2026-11-11T05:49:22Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Cary, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"ISO 27001","optional":false},{"name":"NIST 800-53","optional":false},{"name":"ServiceNow","optional":false},{"name":"ITIL","optional":true}],"status":"live","first_seen_at":"2026-11-11T17:25:48Z","employer_posted_date":"2026-11-11","last_verified_at":"2026-11-11T17:25:48Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Nice to meet you!\nWe’re a leader in data and AI. Through our software and services, we inspire customers around the world to transform data into intelligence - and questions into answers.\nWe’re also a debt-free multi-billion-dollar organization on our path to IPO-readiness. If you're looking for a dynamic, fulfilling career coupled with flexibility and world-class employee experience, you'll find it here.\nAbout the job\nWe’re looking for an IT Auditor - Program Manager, GRC - A, that will help conduct audits to ensure internal controls are in place that align with various regulations (which may include ISO 27001, PCI, FISMA, IRS 1075, and NIST 800-53) as well as the policies and procedures set forth by SAS. A secondary focus is to operate in a compliance role, assist in the risk program, and facilitating remediation of continuous improvement efforts across the business.\nAs an IT Auditor - Program Manager, you will:\nLead internal audits by:\nBenchmarking of security policies against best practices and standards, which may include ISO 27001, PCI, FISMA, IRS 1075, and NIST 800-53.\nCreating and executing on audit test cases and managing work papers and evidence\nDeveloping and presenting Audit Reports\n\nLead efforts to formalize and mature the Audit Program at SAS\nUse the ServiceNow IRM tool to create and manage continuous monitoring indicators, build reporting dashboards, document electronic work papers, and manage audit documentation\nPerform issue remediation tasks such as analysis, documentation, follow-up and retesting in response to audit findings.\nOperate as a consultant, researching and recommending changes to enhance or streamline quality and information security procedures, including internal and external auditing.\nReview hosting, security, and audit contract terms and ensure compliance to current policies and processes.\nHelp maintain the IT and security policy and process development and updates, while ensuring compliance with regulatory regulations and guidance.\nAssist in conducting Risk Assessments, including participation in risk workshops with subject matter experts where vulnerabilities and threats are discussed in association with likelihood and probability factors.\nCoordinate response to complete RFP and security questionnaires.\nPerform other duties, as assigned.\nRequired Qualifications\nBachelor's degree in Business, IT, Computer Science or related field\n5-8 years of experience in an audit, compliance, risk or governance-related functions\nKnowledge of Risk-based auditing methodologies and audit procedures \nAuditor certification strongly preferred, such as CISA\nMust have the ability to work with little supervision, escalating issues, as appropriate\nUS Citizenship required\nYou’re curious, passionate, authentic and accountable. These are our values and influence everything we do.\nPreferred Qualifications\nUnderstanding of best practices for information security and data privacy\nKnowledge and experience with best practices /standards: ISO 27001, ITIL, or COBIT\nUnderstanding of regulatory standards: PCI, FISMA/NIST 800-53, or IRS 1075\nExperience with a GRC System and Electronic Workpapers\nExperience with ServiceNow issue management ticketing system (Preferably IRM)\nSAS software implementation experience or prior implementation experience\nKnowledge of IT, project management, compliance or quality auditor procedures and tools (not financial/accounting)\nIT hosting experience\nWorld-class benefits\nHighlights include...\nComprehensive medical, prescription, dental and vision plans.\nMedical plan options include:PPO with low annual deductible and copays.\nHDHP combined with a health savings account with a contribution from SAS (no access to on-site health care center).\n\nOnsite Health Care Center (HQ) that’s free to employees and family members enrolled in the PPO plan. There's a pharmacy too! Not local to HQ? The pharmacy will ship prescriptions for no additional charge!\nAn industry-leading 401k plan.\nTuition Assistance Program and programs and resources to support your development\nGenerous time away including vacation time, a variety of paid holidays, and our much-loved U.S. Winter Wellness Break between December 25 and January 1.\nVolunteer Time Off, parental leave and unlimited paid sick days.\nGenerous childcare benefits for all full-time employees.\nYou are welcome here.\nAt SAS, it’s not about fitting into our culture - it’s about adding to it. We believe our people make the difference. Our inclusive workforce brings together unique talents and inspires teams to create amazing software that reflects the diversity of our users and customers.\nAdditional Information:\nTo qualify, applicants must be legally authorized to work in the United States, and should not require, now or in the future, sponsorship for employment visa status. SAS is an equal opportunity employer. All qualified applicants are considered for employment without regard to any characteristic protected by law. Read more: Know Your Rights.\nResumes may be considered in the order they are received. SAS employees performing certain job functions may require access to technology or software subject to export or import regulations. To comply with these regulations, SAS may obtain nationality or citizenship information from applicants for employment. SAS collects this information solely for trade law compliance purposes and does not use it to discriminate unfairly in the hiring process.\nSAS only sends emails from verified “sas.com” email addresses and never asks for sensitive, personal information or money. If you have any doubts about the authenticity of any type of communication from, or on behalf of SAS, please contact .\nLet's stay in touch! Join our Talent Community to stay up to date on company news, job updates and more.","description_format":"text","description_chars":5810,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["401k plan","Parental leave"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Machine Learning","Predictive Analytics","BI & Dashboard Software","Data Science & Notebook Platforms"],"lifecycle":[{"event":"open","at":"2026-11-11T17:25:48Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 47 · green card filings: 14","filings_12m":47,"filings_prev_12m":35,"green_card_filings_12m":14,"median_offered_wage_usd":139057,"route":null,"cap_exempt":false,"checked_at":"2026-11-11T07:38:50+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":1}],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":19,"reasons":["conf:1","win:early","comp:brand"],"computed_at":"2026-11-11T19:14:50Z"},"pay":null,"html_url":"https://alion.io/job/sas-institute-it-auditor-program-manager-grc-a","json_url":"https://alion.io/job/sas-institute-it-auditor-program-manager-grc-a.json","meta":{"generated_at":"2026-11-11T19:14:50Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":37108,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-12T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3454},"rest":"https://alion.io/mcp/rest/get_company?id=3454"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsas-institute-it-auditor-program-manager-grc-a"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsas-institute-it-auditor-program-manager-grc-a"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsas-institute-it-auditor-program-manager-grc-a"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/sas-institute-it-auditor-program-manager-grc-a\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsas-institute-it-auditor-program-manager-grc-a"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4081417}},{"tool":"search_jobs","arguments":{"company":"sas.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4081417},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}