Director, Internal Audit

About the role

Upwork is seeking a highly experienced professional to lead and oversee its Sarbanes-Oxley (SOX) compliance program. This critical role involves managing the internal control environment related to financial reporting, ensuring compliance with regulatory standards, and supporting the company's growth as a publicly traded organization. You will be responsible for guiding a team of internal audit specialists, collaborating closely with various departments including Finance, IT, and External Audit, to maintain and enhance the effectiveness of internal controls. The position requires a strategic thinker with a deep understanding of SOX compliance, risk management, and internal controls, as well as the ability to leverage AI tools to streamline processes and improve audit efficiency.

Key facts

What you'll do

• Oversee the entire lifecycle of the annual SOX 404 compliance process, including planning, risk assessment, control documentation, testing, issue tracking, and remediation efforts.
• Develop, implement, and continuously improve the internal control framework over financial reporting, ensuring controls are designed effectively and operate efficiently in accordance with COSO 2013 and PCAOB standards.
• Lead the SOX steering committee, coordinating efforts across departments, and serve as the primary point of contact with external auditors.
• Regularly communicate program status, control deficiencies, and remediation plans to executive leadership and the Audit Committee, ensuring transparency and timely resolution of issues.
• Conduct thorough assessments of control design and operating effectiveness, applying professional judgment to evaluate control deficiencies, and determine their significance in line with SEC guidelines and AS 2201 standards.
• Utilize AI tools to assist in control documentation, automate issue tracking, and synthesize audit data, while maintaining rigorous review processes to verify the accuracy of AI-generated outputs.
• Manage the integration of SOX compliance activities for newly acquired businesses, including evaluating existing controls, identifying gaps, and establishing new controls aligned with Upwork's control environment.
• Lead the scoping, testing, and evaluation of IT general controls across critical financial systems, working closely with IT and Engineering teams to ensure comprehensive coverage and compliance.
• Supervise, mentor, and develop a team of SOX compliance specialists, fostering a culture of continuous improvement and professional growth.
• Manage relationships with third-party service providers, ensuring their work aligns with Upwork's standards and regulatory requirements.
• Stay current on evolving regulations, industry best practices, and technological advancements, including AI applications, to enhance the effectiveness of the internal audit function.

Requirements

• A minimum of 10 years of progressive experience in internal audit, SOX compliance, or external audit, with at least 3 years in a management or leadership role.
• Deep knowledge of SOX 404 program management, including risk assessment, control design, testing procedures, and remediation, with familiarity of PCAOB standards and SEC guidelines.
• Proven experience working for a publicly traded company, managing integrated audits, and effectively communicating control findings and remediation strategies to senior management and audit committees.
• Proficiency in utilizing AI tools to support audit activities, including control documentation, summarizing findings, and organizing audit workpapers, with a strong emphasis on verifying AI outputs for accuracy and compliance.
• Strong understanding of internal control frameworks such as COSO 2013 and PCAOB standards, with the ability to apply these principles in complex environments.
• Experience working with IT general controls, especially in relation to financial systems, and collaborating with IT and Engineering teams to ensure controls are comprehensive and effective.
• Excellent leadership, organizational, and communication skills, with the ability to manage multiple priorities and lead cross-functional teams.
• Ability to work effectively in a fast-paced, dynamic environment, adapting to changing regulatory requirements and technological innovations.

Nice to have

• CPA (Certified Public Accountant) designation.
• Prior experience working at a Big 4 public accounting firm.
• Familiarity with SaaS or marketplace business models, especially in the context of internal controls and compliance.
• Experience working with Oracle Fusion ERP or similar enterprise resource planning systems.
• Previous involvement in leading SOX integration workstreams for acquisitions, including control design and implementation.

Skills & tools

• AI tools for audit support and process automation
• COSO 2013 internal control framework
• PCAOB standards for auditing and internal controls
• US GAAP accounting principles
• Oracle Fusion ERP (preferred but not mandatory)

Practical notes

Upwork employs full-time employees across 34 U.S. states. The company offers a comprehensive benefits package that includes medical coverage, unlimited paid time off, a 401(k) plan with matching contributions, 12 weeks of paid parental leave, and an Employee Stock Purchase Plan. A criminal background check may be required as part of the hiring process. Upwork is committed to equal opportunity employment and will consider qualified applicants with arrest or conviction records in accordance with applicable laws, including the California Fair Chance Act. The interview process may involve recording and summarizing interviews using BrightHire, an AI-enabled interview platform, to facilitate decision-making and improve candidate experience.