The Internal Controls Compliance Manager is responsible for designing, implementing, and monitoring a robust internal control environment aligned with the COSO Framework and state regulatory requirements. This role ensures compliance with ARMICS standards, strengthens risk management practices, and supports audit readiness across financial and operational processes.
Internal Control Framework & Governance
Lead the design and maintenance of internal controls in alignment with the COSO Framework (control environment, risk assessment, control activities, information & communication, monitoring).
Develop and maintain process documentation, including narratives, flowcharts, and risk-control matrices (RCMs).
Partner with finance, operations, and IT to embed controls into key business processes.
Experience working with ERP systems (e.g., Workday, PeopleSoft) and understanding of IT general controls (ITGCs). This role will support setting up internal controls governance structure during Workday ERP implementation.
ARMICS Compliance & Reporting
Coordinate annual ARMICS submissions in accordance with Commonwealth of Virginia requirements.
Perform risk assessments and support certification of internal controls over financial and operational processes.
Ensure timely and accurate documentation supporting agency head certifications.
Risk Assessment & Monitoring
Conduct enterprise-level and process-level risk assessments to identify control gaps and improvement opportunities.
Monitor remediation of identified deficiencies and track progress to closure.
Establish key control indicators (KCIs) and reporting dashboards for leadership.
Training & Continuous Improvement
Develop and deliver training programs on internal controls, compliance requirements, and best practices.
Drive continuous improvement initiatives to enhance efficiency and effectiveness of control processes.
Promote a culture of accountability and risk awareness across the organization.
Qualifications & Experience
Proven ability to manage cross-functional initiatives and influence stakeholders.
Direct experience with ARMICS compliance and filings, preferably within a Virginia public institution such as the University of Virginia.
Experience working with ERP systems (e.g., Workday, PeopleSoft) and understanding of IT general controls (ITGCs).
Core Competencies
Deep understanding of risk and control concepts with a pragmatic approach
Strong analytical and problem-solving skills
Excellent communication and stakeholder management
High attention to detail with the ability to see the big picture
Ability to operate effectively in a fast-paced, deadline-driven environment
What Success Looks Like
Clean, well-documented control environment aligned with COSO principles
Timely and accurate ARMICS certification with no significant deficiencies
Strong partnership with finance, operations, and audit teams
Reduced audit findings and improved process consistency
Increased leadership confidence in internal controls and reporting integrity
MINIMUM REQUIREMENTS
Education: Bachelors degree in Accounting, Finance, or a related field required. Masters degree strongly preferred.
Experience: Minimum of 10 years of progressive experience in accounting/ internal controls, audit and compliance with at least 5 years in a leadership role managing accounting operations required.
Strong working knowledge of the COSO Framework and its practical application.
Licensure: CPA, CIA, or CISA preferred
PHYSICAL DEMANDS
This is primarily a sedentary job involving extensive use of desktop computers. The job does occasionally require traveling some distance to attend meetings, and programs.
The starting base rate for this role is $120,000.00 annually. Individual compensation will be determined by the selected candidate's qualifications, previous work experience, and/or education.
Benefits
Comprehensive Benefits Package: Medical, Dental, and Vision Insurance
Paid Time Off, Long-term and Short-term Disability, Retirement Savings
Health Saving Plans, and Flexible Spending Accounts
Certification and education support
Generous Paid Time Off
UVA Health is a world-class Magnet Recognized academic medical center and health system with a level 1 trauma center. 2023-2024 U.S. News & World Report Best Hospitals guide rates UVA Health University Medical Center as High Performing in 5 adult specialties and 14 conditions/procedures. We are one of 70 National Cancer Institute designated cancer centers. UVA Health Childrens is named by 2023-2024 U.S. News & World Report as the best children's hospital in Virginia with 9 specialties ranked among the best in the nation. Our footprint also encompasses 3 community hospitals and an integrated network of primary and specialty care clinics throughout Charlottesville, Culpeper, Northern Virginia, and beyond.