IT Vendor Management & IT Specialist

Position summary:

The IT Specialist, Vendor Management and IT Audit supports the IT Planning, Portfolio & Governance (PPG) function by coordinating day-to-day vendor management activities and administering the IT audit and compliance program. The role provides operational support across the vendor lifecycle (onboarding, performance management, renewals, and offboarding) and helps ensure timely, consistent execution of IT audit requests, IT General Controls (ITGC) evidence collection, and SOX support activities. This position partners with IT leaders, Finance, Procurement, Legal, Information Security, and external auditors to maintain strong controls, accurate vendor records, and clear reporting. The role reports to the IT Planning, Portfolio & Governance Manager.

Duties & responsibilities:

This position is responsible for supporting IT vendor management and IT audit management activities, including but not limited to:

• Maintain the IT vendor register, including vendor contacts, services provided, contract dates, renewal terms, and ownership within IT.
• Coordinate vendor onboarding and offboarding tasks (access, security requirements, documentation, and handoffs) in partnership with Procurement, Legal, and Information Security.
• Track contract renewals, price changes, and key dates; prepare renewal summaries and route decisions to the appropriate IT owner.
• Support vendor performance management by coordinating QBRs, capturing actions, and maintaining scorecards or service review notes.
• Coordinate vendor invoice and consumption validation inputs for IT owners and Finance (as applicable).
• Maintain vendor risk and compliance artifacts (e.g., SOC reports, insurance certificates, security questionnaires) and coordinate follow-ups on identified gaps.
• Administer the IT audit request process: log requests, assign owners, track due dates, and ensure complete and timely responses.
• Coordinate ITGC and SOX evidence collection cycles, including evidence quality checks (completeness, dates, approvals) and secure retention.
• Support walkthroughs and control owner interviews by preparing schedules, materials, and prior-period evidence packages.
• Maintain an issues log for audit findings, management responses, and remediation actions; track progress and support status reporting.
• Help document and update IT policies, standards, and procedures that support control effectiveness and consistent vendor management practices.
• Prepare routine reporting for the IT Planning, Portfolio & Governance Manager, including vendor renewal calendars, audit status, and key risks or escalations.
• Coordinate across IT teams and corporate functions to resolve vendor, contract, or audit-related issues and escalate items that risk timelines or compliance.

EDUCATION & EXPERIENCE:

• Bachelor’s degree in Business, Supply Chain, Finance, Information Systems, Computer Science, or equivalent experience.
• 3 years of relevant experience in IT vendor management, procurement support, IT governance, risk/compliance, and/or audit coordination. Experience supporting SOX and IT General Controls is preferred.

QUALIFICATIONS & SKILLS:

• Strong organization and follow-through; able to manage multiple timelines, owners, and due dates.
• Working knowledge of vendor lifecycle management concepts (onboarding, renewals, performance reviews, offboarding).
• Familiarity with audit concepts and evidence expectations (completeness, accuracy, approvals, retention).
• Attention to detail and ability to maintain accurate records, logs, and documentation.
• Ability to identify gaps, ask clarifying questions, and escalate risks early.
• Clear written and verbal communication skills; comfortable working with IT, Finance, Procurement, Legal, Information Security, and external auditors.
• Proficient with Microsoft Excel, PowerPoint, and collaboration tools; able to build and maintain trackers and concise status reporting.
• Ability to work with confidential information and follow established data handling and retention practices.
• Comfort with structured processes and continuous improvement; able to document processes and suggest pragmatic improvements.

CERTIFICATES & LICENSES:

• None required; relevant certifications (e.g., CISA, CIA, ITIL, Lean/Six Sigma, or procurement/vendor management training) are a plus.

PHYSICAL REQUIREMENTS:

• Primarily office work; must be able to sit for extended periods and use hands/arms for repetitive motion (keyboard/mouse).
• Ability to travel as needed for business meetings and project activities.