SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 180,000 - 202,500 / annual
Discord's Internal Audit team is building a world-class risk management and controls function to support the platform's growth toward enterprise readiness. This Technology Risk Audit Manager role leads the technical audit mission—IT SOX/ITGC, system controls, and consumer trust domains (privacy, security, trust & safety)—protecting hundreds of millions of users globally.
You will own IT SOX and ITGC strategy across financial-reporting systems, extending risk assessment into consumer trust domains. Key responsibilities include partnering with Engineering to ensure proper access controls, segregation of duties, change management, and CI/CD integrity; guiding control design through system implementations and platform changes; managing teams and projects related to IT controls and technical audits (including external contractors); applying AI and automation tools to improve audit testing efficiency and anomaly detection; and tracking remediation while coordinating with external auditors and reporting to senior leadership.
This is a unique opportunity to help build the internal audit function from the ground up with an AI-native approach from day one. Your first months will focus on learning Discord's financial-reporting systems landscape, understanding the GRC program structure, and evaluating AI-powered testing solutions. You will report to the Vice President of Internal Audit.
Required: 8+ years in IT audit, risk management, or controls spanning financial (SOX/ITGC) and consumer trust domains. Deep ITGC fundamentals (access management, change management, computer operations, SDLC controls), SOX/ICFR knowledge, framework fluency (COSO, COBIT, NIST CSF), proven external audit coordination, and hands-on experience with AI/automation tools in audit processes. Bachelor's degree in Information Systems, Computer Science, Accounting, or equivalent.
Bonus: consumer-facing platform experience, subscription/ad tech background, homegrown systems auditing, AI governance, third-party risk, data privacy regulatory knowledge, DevSecOps/CI-CD pipeline controls, or CISA/CISSP/CPA credentials.
