SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 100,000 - 150,000 / annual
Klaviyo is seeking a Senior IT Auditor to join its Internal Audit function, reporting to the VP of Internal Audit & Compliance. This is an individual contributor role with no supervisory responsibilities. The position focuses on IT SOX controls (IT General Controls, IT application controls, and key reports) across homegrown and third-party systems, with opportunities to expand into broader technology audits including cloud security, data governance, and AI governance.
Key responsibilities include:
- Advising system control owners on internal control design while maintaining audit independence
- Performing end-to-end system walkthroughs to identify SDLC controls and evaluate ITGC controls across homegrown applications and third-party SaaS platforms
- Preparing audit documentation requests and coordinating with control owners
- Designing and executing control testing to assess design and operating effectiveness
- Assessing and tracking audit findings, control weaknesses, and remediation efforts
- Developing ITGC control training materials and providing guidance to stakeholders
- Reviewing IT policies and making recommendations
- Performing IT Application Control testing over in-scope systems, including interfaces and integrations
- Reviewing SOC 1 reports and complementary user entity controls
- Preparing key report testing and evaluating segregation of duties controls
- Assisting with technology audit projects (cloud security, data governance, AI governance)
- Leveraging AI tools across the audit lifecycle (evidence review, walkthrough documentation, testing, drafting observations) with human validation
- Building reusable AI prompts, workflows, and automations to improve audit efficiency
- Helping define how Internal Audit validates AI-assisted work for external auditor reliance
- Assessing risks of AI tools and agents in the financial reporting environment
- Coordinating with co-sourced third-party providers and external auditors
- Developing and maintaining positive relationships with process owners and stakeholders
The ideal candidate will be an experienced professional who thrives in a fast-paced, high-growth environment and is passionate about building companies.
REQUIREMENTS:
- Bachelor's degree in Information Systems, Computer Science, Accounting, Business, or other relevant field
- 5+ years of IT audit experience in public accounting (Big 4 firms) and/or industry, including IT SOX controls testing, ideally in a Tech/SaaS environment
- Strong understanding of SOX 404, PCAOB Auditing Standards, COSO 2013, COBIT, US GAAP, and Internal Audit Standards
- Strong understanding of scoping, design, and testing IT-related controls for homegrown and off-the-shelf applications and cloud environments (e.g., AWS), including ITGCs, IT application controls, interfaces, key reports, segregation of duties, and SOC1 reviews
- Previous experience auditing ITGCs related to CI/CD pipelines
- Experience with planning, scoping, testing, and reporting within a full-year SOX program
- Experience leading the planning, scoping, execution, and reporting on IT, operational, or financial audits
- Data analytics skills with experience in SQL, Python, Tableau, or other data analytics/visualization tools
- Hands-on experience using AI tools in audit work with concrete examples of how AI improved efficiency or quality, and understanding of AI limitations (accuracy, confidentiality, over-reliance)
- Experience collaborating with internal or co-sourced consulting resources
- Excellent written and verbal communication skills with ability to discuss technical concepts to non-technical stakeholders
- Exceptional analytical and problem-solving skills with strong attention to detail and investigative mindset
- Self-starter with initiative, curiosity to learn about AI and emerging technologies, and high energy level
- Strong organizational skills and ability to prioritize workload and communicate status
- Professional audit-relevant certification: CISA preferred; CPA, CIA, or CISSP a plus
- Experience with SOX GRC tools such as Optro (formerly AuditBoard) and ERP systems like NetSuite strongly preferred
- Working knowledge of AI governance frameworks (e.g., NIST AI RMF, ISO/IEC 42001) or AI audit credentials (e.g., ISACA AAIA) is a plus
- Comfortable working in a fast-paced, high-growth environment
