Internal Audit Lead

About the role

This role focuses on leading IT systems and controls within the Internal Audit team, reporting to the Head of Internal Audit. You will oversee SOX IT controls testing and assurance, focusing on IT General Controls, Automated Controls, and Key Report testing. This position also contributes to broader IT and data-focused audit projects, enhancing governance and internal controls.

Key facts

What you'll do

• Lead the planning and execution of SOX testing for IT General Controls, IT Automated Controls, and Key Reports.
• Support the annual IT SOX scoping and risk assessment process.
• Conduct and lead walkthroughs and testing of IT controls across various systems.
• Coordinate evidence collection, manage remediation, and ensure timely closure of audit gaps.
• Oversee and review the work of internal and co-sourced team members.
• Identify control deficiencies and collaborate with management on remediation strategies.
• Monitor business process changes, evaluate their impact on controls, and recommend improvements.
• Maintain all ICFR / SOX 404 documentation, including COSO mapping and risk matrices.
• Independently evaluate control deficiencies and monitor remediation implementation.
• Lead internal audit projects focused on IT, data governance, and emerging technology risks.
• Provide advisory services to leaders on IT risk management and compliance.
• Evaluate data integrity, system development, access management, and change management.
• Partner with engineering and IT teams to design and implement scalable IT controls.
• Identify, assess, and document control deficiencies, including severity and impact.
• Work with cross-functional leadership to develop and validate remediation plans.
• Recommend process improvements while maintaining control effectiveness.
• Act as a key liaison with IT, Engineering, Security, finance, and business system teams.
• Collaborate with external auditors on IT SOX testing and reliance strategies.
• Provide training and guidance on IT control requirements and best practices.
• Prepare reports and presentations summarizing IT SOX results and audit findings.
• Communicate complex IT control issues clearly to senior management.
• Monitor industry and regulatory developments related to IT and data risks.

Requirements

• Bachelor's degree in Information Systems, Computer Science, Accounting, or a related field.
• 10+ years of progressive experience in IT audit, IT risk, or IT SOX compliance.
• At least 3+ years in a managerial or supervisory role.
• Experience with a Big Four accounting firm or equivalent internal/external audit or IT consulting.
• Deep expertise in ITGCs, IT Automated Controls, key report testing, and their relevance to ICFR.
• Familiarity with Internal Audit methodology and IIA standards.
• Experience auditing both homegrown business systems and third-party SaaS applications.
• Familiarity with data governance, system implementation reviews, and cybersecurity risk assessments.
• Experience with audit management tools like AuditBoard, Archer, or Workiva.
• Strong analytical and technical skills to evaluate IT and data risks.
• Excellent communication and interpersonal skills for engaging diverse stakeholders.
• Proven ability to lead and review the work of internal and co-sourced teams.
• Organized, detail-oriented, and capable of managing multiple priorities.

Nice to have

• Experience with data analytics and automated testing tools for SOX efficiency.
• Exposure to emerging technologies like cloud computing, cybersecurity, and RPA.
• Prior experience in a fast-growth or global organization, adapting SOX programs.
• Familiarity with cybersecurity frameworks such as NIST, ISO 27001, or COBIT.
• Experience with data governance and data integrity reviews.
• Involvement in system implementation or upgrade reviews for ERP or financial systems.
• Exposure to DevOps, agile development, or CI/CD environments.
• Working knowledge of data analytics and automation tools (e.g., SQL, Python, ACL, Power BI).

Skills & tools

• IT General Controls (ITGCs)
• IT Automated Controls
• Key Report testing
• ICFR
• Audit management tools (AuditBoard, Archer, Workiva)
• Data analytics (SQL, Python, ACL, Power BI)

Practical notes

This position requires presence in our San Jose office 4 days per week; Tuesday is the designated work-from-home day. CISA, CISSP, or equivalent certification is strongly preferred; CPA or CIA is a plus.

About the company

• Founded in 2012, with 500+ employees, and growing fast
• Our investors notably include TWG Global, US Innovative Technology Fund (USIT), Andra Capital, SGW, Andrej Karpathy, ARK Invest, Fincadia Advisors, G Squared, In-Q-Tel (IQT), KHK & Partners, NVIDIA, Pegatron, Supermicro, Wistron, Wiwynn, Gradient Ventures, Mercato Partners, SVB, 1517, and Crescent Cove
• We have research papers accepted at top machine learning and graphics conferences, including NeurIPS, ICCV, SIGGRAPH, and TOG
• Our val