Responsibilities
- Lead end-to-end SOX compliance activities for IT General Controls, automated controls, and critical reporting systems.
- Support annual scoping and risk evaluation for IT-related SOX requirements in coordination with the broader financial controls program.
- Conduct and manage control walkthroughs and assess design and operational effectiveness across proprietary and external technology platforms.
- Oversee evidence gathering, track findings, and drive resolution of control gaps within established timelines.
- Supervise both internal and co-sourced audit personnel, ensuring accuracy and consistency in audit deliverables.
- Detect control weaknesses and collaborate with leadership to establish corrective action plans.
- Assess business process changes for control implications, applying independent judgment and escalating impacts to senior audit leadership.
- Maintain and update SOX 404 documentation including control frameworks, process narratives, risk matrices, and testing strategies.
- Apply critical thinking and technical knowledge to assess control failures, determine root causes, and verify remediation progress.
- Manage internal audit engagements centered on IT systems, data governance, and new technology with emphasis on financial reporting controls.
- Advise technology and business executives on improving risk management, control frameworks, and regulatory compliance.
- Review data accuracy, software development lifecycles, user access protocols, and system change procedures.
- Collaborate with engineering and IT departments to build robust, scalable control mechanisms.
- Identify, analyze, and record control deficiencies, including their severity and business impact.
- Coordinate with cross-functional leaders to create, monitor, and validate remediation timelines and actions.
- Suggest enhancements to processes that improve efficiency without compromising control integrity.
- Serve as primary point of contact between audit and IT, engineering, security, finance, and business systems teams.
- Collaborate with external auditors on testing alignment and reliance strategies for IT controls.
- Deliver training and guidance on IT control standards and industry best practices to technical and non-technical stakeholders.
- Develop summaries and presentations of audit outcomes, control status, and remediation progress for executive review.
- Explain complex technical control issues clearly and concisely to senior management and governance bodies.
- Track regulatory and technological trends to inform leadership about evolving IT and data risks.
Benefits
- Competitive base salary and equity incentives
- Comprehensive health, dental, and vision benefits for employees and dependents
- Stipends for wellness and commuting expenses in eligible positions
- 401k retirement plan with 2% employer contribution for U.S. staff
- Flexible paid time off policy that is actively utilized by the team
Compensation
Generous cash & equity compensation
Work Arrangement
On-site — San Jose, San Francisco
Other
- This position requires attendance at the San Jose or San Francisco office four days per week; the company-designated remote work day is currently Tuesday.
- Equal Opportunity Employer: Hiring decisions are made without regard to race, color, religion, national origin, sex, gender identity, marital status, sexual orientation, veteran status, genetic information, citizenship, or other protected characteristics under applicable laws.
Not specified
