SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 124,000 - 186,000 / annual
Klaviyo is seeking an experienced Manager, IT SOX to lead the company's IT SOX program and technology audits. This role reports to the VP of Internal Audit & Compliance and manages a Sr. IT Internal Auditor day-to-day, while collaborating with stakeholders across IT, Security, Business Intelligence, Finance, Accounting, Legal, People Operations, Engineering, and Global Technology Solutions.
Key responsibilities include:
**IT SOX Program Leadership:**
Own the annual IT SOX plan including risk assessment, scoping of in-scope systems, and coordination with external auditors. Scale and rationalize IT SOX scope as the business evolves. Lead end-to-end execution across IT General Controls (logical access, change management including CI/CD, IT operations), IT application controls, system interfaces and integrations, key reports, and segregation of duties across homegrown and third-party SaaS applications. Maintain the ITGC risk and control matrix in Optro. Review SOC 1 reports and complementary user entity controls for in-scope vendors. Evaluate IT deficiencies, determine root cause and severity, and drive remediation to closure. Coordinate with co-sourced providers, external auditors, and internal partners. Provide SOX readiness advisory on new system implementations while maintaining Internal Audit independence. Train control owners on IT SOX expectations and provide regular status reporting to leadership.
**Technology Audits:**
Lead risk-based technology audits (cloud security, cybersecurity, data governance, AI governance) with accountability for planning, scoping, execution, and reporting. Contribute to and eventually own the IT audit plan.
**AI-Enabled Audit:**
Set standards for how the team uses AI across the audit lifecycle, including review, validation, and documentation for external auditor reliance. Build reusable prompts, workflows, and automations. Support automated control testing and continuous monitoring using SQL or Python for full-population analysis. Assess risks of AI tools and agents in the financial reporting environment. Advise on control design for AI-driven processes. Monitor emerging trends in IT audit and AI.
**Supervisory Responsibilities:**
Manage and coach the Sr. IT Internal Auditor, including setting priorities, reviewing workpapers, and providing feedback and development. Oversee co-sourced IT testing and review workpapers for quality and consistency.
**Requirements:**
- Bachelor's degree in Information Systems, Computer Science, Accounting, Business, or other relevant field
- 8+ years of IT audit experience in public accounting (Big 4 firms) and/or industry, including IT SOX controls testing, ideally in Tech/SaaS
- Experience managing or coaching auditors and/or co-sourced resources
- Strong understanding of SOX 404, PCAOB Auditing Standards, COSO 2013, COBIT, US GAAP, and Internal Audit Standards
- Deep understanding of ITGCs, IT application controls, interfaces, key reports, segregation of duties, and SOC 1 reviews for homegrown and off-the-shelf applications and cloud environments (e.g., AWS)
- Experience auditing modern engineering environments including CI/CD pipelines, access defined in code, and automated data pipelines
- Experience leading planning, scoping, testing, and reporting for a full-year IT SOX program
- Experience leading technology audits (cloud, cybersecurity, data governance)
- Excellent written and verbal communication skills with ability to discuss technical concepts to non-technical stakeholders
- Exceptional analytical and problem-solving skills with attention to detail and investigative mindset
- Excellent project management skills with cross-functional teams
- Data analytics skills with experience in SQL, Python, Tableau, or similar tools
- Professional audit certification: CISA preferred; CPA, CIA, or CISSP a plus
- Experience with SOX GRC tools such as Optro (formerly AuditBoard) and ERP systems like NetSuite strongly preferred
- Working knowledge of AI governance frameworks (NIST AI RMF, ISO/IEC 42001) or AI audit credentials (ISACA AAIA) a plus
- Comfortable in fast-paced, high-growth environment
- Hands-on leader who coaches and develops others, sets clear priorities, gives direct feedback, and reviews work for quality
- AI-fluent auditor who can share concrete examples of using AI to do audit work faster or better, and understands its limits
- Curious about how AI is reshaping both the risks audited and how auditing is conducted
