SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 100,000 - 150,000 / annual
Klaviyo is seeking a Senior IT Internal Auditor to join its Internal Audit function, which leverages industry best practices to monitor and improve internal controls, processes, and drive operating efficiencies. The company is building an AI-first audit function using AI and automation across the audit lifecycle.
You will report to the VP of Internal Audit & Compliance, work closely with the Manager of IT SOX, and collaborate with key stakeholders across IT, Security, Business Intelligence, Finance, Accounting, Legal, People Operations, Engineering, and Global Technology Solutions. This is an individual contributor role with no supervisory responsibilities.
Key responsibilities include:
- Advise system control owners on internal control design while maintaining IA independence; maintain the ITGC risk and control matrix in Optro
- Perform end-to-end system walkthroughs to identify System Development Life Cycle Controls (SDLC) and evaluate ITGC controls across homegrown applications and third-party SaaS
- Prepare audit documentation requests, coordinate with control owners, and track status
- Perform periodic testing to assess design and operating effectiveness of controls; build test plans and audit workpapers in Optro
- Assess and track audit findings, control weaknesses, root cause, and severity; coordinate remediation via Optro
- Prepare ITGC control training materials and review IT-related policies
- Develop and maintain positive working relationships with process owners to increase awareness of risk, controls, and Internal Audit's role
- Coordinate with co-sourced third-party providers, external auditors, and internal business partners
- Develop and communicate status reporting for ITGC projects and internal audits
- Perform IT Application Control testing over in-scope systems, including interfaces and integrations
- Review SOC 1 reports, complementary user entity controls, and bridge letters for in-scope vendors
- Prepare key report testing over reports used in key control operations, including information produced by the entity (IPE)
- Evaluate Segregation of Duties (SOD) controls and IT controls designed to prevent or detect fraud
- Assist with internal audit projects including technology audits (cloud security, data governance, AI governance)
- Use AI tools across the audit lifecycle (evidence review, walkthrough documentation, testing, drafting observations) with human review and documented validation
- Build and maintain reusable prompts, workflows, and automations; identify efficiency improvements
- Help define how IA validates AI-assisted work for external auditor reliance
- Assess risks of AI tools and agents in the financial reporting environment
The primary focus is IT SOX controls (IT General Controls, IT application controls, and key reports) across homegrown and third-party systems, with opportunity to grow into broader technology audits.
Requirements:
- Bachelor's degree in Information Systems, Computer Science, Accounting, Business, or other relevant field
- 5+ years of IT audit experience in public accounting (Big 4 firms) and/or industry, including IT SOX controls testing, ideally in a Tech/SaaS environment
- Strong understanding of SOX 404, PCAOB Auditing Standards, COSO 2013, COBIT, US GAAP, and Internal Audit Standards
- Strong understanding of scoping, design, and testing IT-related controls for homegrown and off-the-shelf applications and cloud environments (e.g., AWS), including ITGCs, IT application controls, interfaces, key reports, segregation of duties, and SOC1 reviews
- Previous experience auditing ITGCs related to CI/CD pipelines
- Experience with planning, scoping, testing, and reporting within a full-year SOX program
- Experience leading planning, scoping, execution, and reporting on IT, operational, or financial audits
- Data analytics skills with experience in SQL, Python, Tableau, or other data analytics/visualization tools
- Hands-on experience using AI tools in audit work with concrete examples of how AI improved speed or quality; understanding of AI limitations (accuracy, confidentiality, over-reliance)
- Experience collaborating with internal or co-sourced consulting resources
- Excellent written and verbal communication skills; ability to drive influence and discuss technical concepts clearly
- Exceptional analytical and problem-solving skills with attention to detail and investigative mindset
- Self-starter demonstrating initiative, curiosity to learn (including about AI and emerging technologies), and high energy
- Strong organization skills, ability to prioritize workload, and clear status communication
- Experience using SOX GRC tools such as Optro (formerly AuditBoard) and ERP systems (e.g., NetSuite) strongly preferred
- Comfortable in fast-paced, high-growth environments
- Professional audit-relevant certification: CISA preferred; CPA, CIA, or CISSP a plus
- Working knowledge of AI governance frameworks (e.g., NIST AI RMF, ISO/IEC 42001) or AI audit credentials (e.g., ISACA AAIA) is a plus
