Klaviyo

Manager, IT SOX

San Francisco, CA. Posted 24 days ago

The role

This person will lead the IT SOX program and technology audits. They will manage and coach a Senior IT Internal Auditor and work with stakeholders across various departments.

What you will do

  • Own the annual IT SOX plan including risk assessment and scoping
  • Lead end-to-end execution of the IT SOX program
  • Maintain the ITGC risk and control matrix within Optro
  • Review SOC 1 reports, complementary user entity controls, and bridge letters
  • Evaluate IT deficiencies and drive remediation with control owners
  • Coordinate with co-sourced third party providers and external auditors
  • Provide SOX readiness advisory to business partners
  • Train and enable control owners on IT SOX expectations
  • Lead risk-based technology audits such as cloud security and cybersecurity
  • Set standards for how the team uses AI across the audit lifecycle

Required qualifications

  • Bachelor's degree in Information Systems, Computer Science, Accounting, Business, or other relevant field
  • 8+ years of IT audit experience in public accounting and/or industry
  • Experience managing or coaching auditors and/or co-sourced resources
  • Strong understanding of SOX 404, PCAOB Auditing Standards, COSO 2013, COBIT, US GAAP, and Internal Audit Standards
  • Deep understanding of ITGCs, IT application controls, interfaces, key reports, segregation of duties, and SOC 1 reviews
  • Experience auditing modern engineering environments including CI/CD pipelines and automated data pipelines
  • Experience leading planning, scoping, testing and reporting for a full year IT SOX program
  • Experience leading technology audits
  • Data analytics skills with experience in SQL, Python, Tableau, or other data analytics or visualization tools
  • Professional audit relevant certification

Nice to have

  • Experience in using SOX GRC tools such as Optro (formerly AuditBoard) and ERP systems e.g. NetSuite
  • Working knowledge of AI governance frameworks (e.g., NIST AI RMF, ISO/IEC 42001)
  • AI audit credentials (e.g., ISACA AAIA)
  • CISA
  • CPA, CIA, or CISSP

Benefits

  • Annual cash bonus plan
  • Equity
  • Sign-on payments
  • Health, welfare, and wellbeing benefits

Before you apply

  • By participating in the interview process, you acknowledge you will adhere to Guidelines for using AI in the Klaviyo interview Process

About the company

Klaviyo empowers creators to own their destiny by making first-party data accessible and actionable. They aim to delight customers through technology that nurtures personalized experiences.

Manager, IT SOX at Klaviyo | JobZoey