Klaviyo

Manager, IT SOX

Boston, MA. Posted 24 days ago

The role

This person will lead the IT SOX program and technology audits. They will manage and coach a Senior IT Internal Auditor and work with stakeholders across various departments.

What you will do

  • Own the annual IT SOX plan including risk assessment and scoping
  • Lead end-to-end execution of the IT SOX program
  • Maintain the ITGC risk and control matrix within Optro
  • Review SOC 1 reports, complementary user entity controls, and bridge letters
  • Evaluate IT deficiencies and drive remediation with control owners
  • Coordinate with co-sourced third party providers and external auditors
  • Provide SOX readiness advisory to business partners
  • Train and enable control owners on IT SOX expectations
  • Lead risk-based technology audits such as cloud security and cybersecurity
  • Set standards for how the team uses AI across the audit lifecycle

Required qualifications

  • Bachelor's degree in Information Systems, Computer Science, Accounting, Business, or other relevant field
  • 8+ years of IT audit experience in public accounting and/or industry
  • Experience managing or coaching auditors and/or co-sourced resources
  • Strong understanding of SOX 404, PCAOB Auditing Standards, COSO 2013, COBIT, US GAAP, and Internal Audit Standards
  • Deep understanding of ITGCs, IT application controls, interfaces, key reports, segregation of duties, and SOC 1 reviews
  • Experience auditing modern engineering environments including CI/CD pipelines and automated data pipelines
  • Experience leading planning, scoping, testing and reporting for a full year IT SOX program
  • Experience leading technology audits
  • Data analytics skills with experience in SQL, Python, Tableau, or other data analytics or visualization tools
  • Professional audit relevant certification

Nice to have

  • Experience in using SOX GRC tools such as Optro (formerly AuditBoard) and ERP systems e.g. NetSuite
  • Working knowledge of AI governance frameworks (e.g., NIST AI RMF, ISO/IEC 42001)
  • AI audit credentials (e.g., ISACA AAIA)
  • CISA
  • CPA, CIA, or CISSP

Benefits

  • Annual cash bonus plan
  • Equity
  • Sign-on payments
  • Health, welfare, and wellbeing benefits

About the company

Klaviyo empowers creators to own their destiny by making first-party data accessible and actionable. They aim to delight their customers through personalized experiences in ecommerce and beyond.

Manager, IT SOX at Klaviyo | JobZoey