Workplace Type: Hybrid

Founded in 1921 Newmont Mining Corporation is one of the largest gold mining companies in the world. Newmont prides itself on safety and embraces diversity, engages employees, fosters innovation, rewards high performance and develops great leaders.

Your Impact

You will drive Newmont’s global IT risk, SOX, and third-party risk management strategy by advancing automation, strengthening controls, and improving risk visibility. Your work will directly enhance compliance, operational efficiency, and enterprise-wide risk resilience

As a part of our team, you will

Lead IT SOX automation, enabling continuous control monitoring and streamlined evidence collection using GRC, ServiceNow, and data analytics tools
Execute global IT risk management across cybersecurity, technology, and vendor risks
Support and scale the IT Third-Party Risk Management (TPRM) framework, including due diligence, onboarding, monitoring, and remediation
Develop and maintain IT policies, standards, and control frameworks aligned with regulatory expectations
Coordinate automated control testing, audit readiness, and SOX compliance activities
Deliver risk reporting and insights to leadership, highlighting trends, control performance, and key issues
Conduct risk assessments and implement mitigation strategies across IT systems and vendors
Drive training and awareness programs to embed a culture of risk management and compliance
Partner with stakeholders across IT, Finance, Audit, and external vendors to align priorities and deliver outcomes
Lead cross-functional collaboration to ensure consistent, high-quality execution of ITGC and compliance objectives

Prerequisites for your success in this role

Experience in IT risk management, SOX compliance, cybersecurity, or third-party risk management
Strong knowledge of risk frameworks, regulatory requirements, and audit practices
Proficiency with GRC platforms, automation tools, and risk assessment methodologies
Proven ability to assess, mitigate, and communicate complex IT and vendor risks
Strong stakeholder management, communication, and influencing skills
Analytical mindset with the ability to interpret data and drive decision-making
Experience working in global, cross-functional environments
Bachelor’s degree in Information Security, Risk Management, or related field (or equivalent experience)
Ability to travel as needed; multilingual skills are a plus

Your work environment

You will operate in a collaborative, global environment partnering with IT, Finance, Audit, and external stakeholders. This role combines strategic oversight with hands-on execution, leveraging advanced tools and automation to modernize risk and compliance practices. Occasional travel to sites or offices may be required. Preferred candidate able to work a hybrid model schedule from the Denver, CO office.

Why join Newmont

Be part of a global leader in responsible mining and sustainability
Shape the future of IT risk and compliance through innovation and automation
Work in a values-driven, inclusive culture that prioritizes safety and collaboration
Access opportunities for professional growth and global career development
Competitive compensation and comprehensive benefits

We understand no candidate will meet every single desired qualification. If your experience looks a little different from what we’ve identified and you think you can bring value to the role, we’d love to learn more about you!

For more information on Newmont:

Website: http://www.newmont.com
Lifecycle of a Mine: https://www.newmont.com/lifecycle-of-a-mine
Blog: https://www.newmont.com/blog-stories/
Sustainability: https://www.newmont.com/sustainability/

Newmont seeks to recruit, hire, place and promote qualified applicants, meaning applicants who meet the minimum requirements of the position, without regard to personal characteristics such as gender, race, nationality, ethnicity, social and indigenous origin, religion or belief, disability, age or sexual orientation or any other characteristic protected by applicable law.

NOTE: Newmont does not ask for or require job applicants to pay money to apply or be considered for employment with the Company. In addition, Newmont does not ask potential job candidates to provide sensitive personal data without first submitting a job application through our secure, online portal, and only as requested for legitimate business purposes. If you are asked to provide money or sensitive personal data through any other means, do not respond and please report this immediately to [email protected].

Specialist, Global Digital Compliance

Job Description