SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 124,000 - 186,000 / annual
Klaviyo is seeking an experienced Manager, IT SOX to lead the company's IT SOX program and technology audits. This role reports to the VP of Internal Audit & Compliance and manages a Sr. IT Internal Auditor while working cross-functionally with IT, Security, Business Intelligence, Finance, Accounting, Legal, People Operations, Engineering, and Global Technology Solutions.
Key responsibilities include:
**IT SOX Program Leadership:**
Own the annual IT SOX plan including risk assessment, scoping of in-scope systems, and alignment with external auditors. Scale and rationalize IT SOX scope as the business evolves. Lead end-to-end execution across IT General Controls (logical access, change management including CI/CD, IT operations), IT application controls, system interfaces and integrations, key reports, and segregation of duties across homegrown and third-party SaaS applications. Maintain the ITGC risk and control matrix in Optro. Review SOC 1 reports and complementary user entity controls for in-scope vendors. Evaluate IT deficiencies, determine root cause and severity, and drive remediation to closure. Coordinate with co-sourced providers, external auditors, and internal stakeholders. Provide SOX readiness advisory on new system implementations while maintaining audit independence. Train control owners on IT SOX expectations and provide regular status reporting to leadership.
**Technology Audits:**
Lead risk-based technology audits (cloud security, cybersecurity, data governance, AI governance) with accountability for planning, scoping, execution, and reporting. Contribute to the IT audit plan with opportunity to own it over time.
**AI-Enabled Audit:**
Set standards for AI use across the audit lifecycle, including review, validation, and documentation for external auditor reliance. Build reusable prompts, workflows, and automations. Support automated control testing using SQL or Python for full-population analysis. Assess risks of AI tools in the financial reporting environment. Advise on control design for AI-driven processes. Monitor emerging trends in IT audit and AI.
**Supervisory Responsibilities:**
Day-to-day management and coaching of Sr. IT Internal Auditor, including priority-setting, workpaper review, and feedback. Oversight of co-sourced IT testing including quality and consistency review.
The ideal candidate is a hands-on leader who develops others, uses AI in daily work, and thrives in fast-paced, evolving environments.
**Requirements:**
- Bachelor's degree in Information Systems, Computer Science, Accounting, Business, or related field
- 8+ years of IT audit experience in public accounting (Big 4 firms) and/or industry, including IT SOX controls testing, ideally in Tech/SaaS
- Experience managing or coaching auditors and/or co-sourced resources
- Strong understanding of SOX 404, PCAOB Auditing Standards, COSO 2013, COBIT, US GAAP, and Internal Audit Standards
- Deep understanding of ITGCs, IT application controls, interfaces, key reports, segregation of duties, and SOC 1 reviews for homegrown and off-the-shelf applications and cloud environments (e.g., AWS)
- Experience auditing modern engineering environments including CI/CD pipelines, access defined in code, and automated data pipelines
- Experience leading planning, scoping, testing, and reporting for a full-year IT SOX program
- Experience leading technology audits (cloud, cybersecurity, data governance)
- Excellent written and verbal communication skills with ability to discuss technical concepts to diverse stakeholders
- Exceptional analytical and problem-solving skills with attention to detail and investigative mindset
- Excellent project management skills with cross-functional teams
- Data analytics skills with experience in SQL, Python, Tableau, or similar tools
- Professional audit certification—CISA preferred; CPA, CIA, or CISSP a plus
- Experience with SOX GRC tools such as Optro and ERP systems like NetSuite strongly preferred
- Working knowledge of AI governance frameworks (NIST AI RMF, ISO/IEC 42001) or AI audit credentials (ISACA AAIA) a plus
- Comfortable in fast-paced, high-growth environments
