Senior Internal IT Auditor

The role

This person will perform IT SOX controls testing and manage the ITGC risk and control matrix. They will use AI tools across the audit lifecycle to improve efficiency and strengthen the internal control environment.

What you will do

• Collaborate to strengthen the internal control environment and improve the SOX program
• Advise system control owners on the design of internal controls
• Maintain the ITGC risk and control matrix within Optro
• Perform end to end system walkthroughs for SDLC, risks, and ITGC controls
• Prepare audit documentation request lists and coordinate with control owners
• Perform periodic testing to assess design and operating effectiveness of controls
• Assess and track audit findings, gaps, and remediation
• Prepare ITGC control training materials
• Review IT related policies and provide recommendations
• Use AI tools across the audit lifecycle for evidence review, documentation, and testing

Required qualifications

• Strong understanding of SOX 404, PCAOB Auditing Standards, COSO 2013, COBIT, US GAAP, and Internal Audit Standards
• Strong understanding of scoping, design and testing IT related controls for homegrown and off the shelf applications and cloud environments
• Previous experience auditing ITGCs related to CI/CD pipelines
• Experience with planning, scoping, testing and reporting within a full year SOX program
• Experience with leading the planning, scoping, execution and reporting on IT, operational or financial audits
• Data analytics skills with experience in SQL, Python, Tableau, or other data analytics or visualization tools
• Hands-on experience using AI tools in audit work
• Experience in collaborating with a team of internal or co-sourced consulting resources
• Excellent written and verbal communication skills
• Exceptional analytical and problem-solving skills
• Bachelor's degree in Information Systems, Computer Science, Accounting, Business, or other relevant field
• 5+ years of IT audit experience in public accounting or industry

Nice to have

• Experience in using SOX GRC tools such as Optro (formerly AuditBoard) and ERP systems e.g. Netsuite
• Working knowledge of AI governance frameworks (e.g., NIST AI RMF, ISO/IEC 42001)
• AI audit credentials (e.g., ISACA AAIA)
• CISA
• CPA, CIA, or CISSP

Benefits

• Annual cash bonus plan
• Equity
• Sign-on payments
• Health, welfare, and wellbeing benefits

About the company

Klaviyo empowers creators to own their destiny by making first-party data accessible and actionable. They aim to delight customers through technology that nurtures personalized experiences.