Manager, IT SOX

Supervisory Responsibilities

• Day-to-day management and coaching of the Sr. IT Internal Auditor, including setting priorities, reviewing workpapers, and providing feedback and development
• Oversight of co-sourced IT testing, including review of workpapers for quality and consistency

How you'll make a difference: IT SOX program

• Own the annual IT SOX plan, including risk assessment, scoping of in-scope systems, and alignment with our external auditor on reliance and timing
• Scale and rationalize IT SOX scope as Klaviyo’s systems and business evolve
• Lead end-to-end execution of the IT SOX program across ITGCs (logical access, change management including CI/CD, IT operations), IT application controls, system interfaces and integrations, key reports/IPE, and segregation of duties (SOD), across homegrown applications and third-party SaaS
• Maintain the ITGC risk and control matrix within Optro, our SOX project management system
• Review SOC 1 reports, complementary user entity controls, and bridge letters for in-scope vendors
• Evaluate IT deficiencies, including root cause and severity, and drive remediation with control owners through closure
• Coordinate with co-sourced third party providers, external auditors, and internal business partners to ensure alignment and timely execution of IT SOX work
• Provide ongoing SOX readiness advisory to business partners on new system implementations and significant changes, including SDLC controls, while maintaining IA’s independence from implementing or operating controls
• Train and enable control owners on IT SOX expectations
• Provide regular status reporting on IT SOX progress, risks, and remediation to IA leadership and key stakeholders
• Performs other related duties as assigned

Technology audits

• Lead risk-based technology audits (e.g., cloud security, cybersecurity, data governance, AI governance), with accountability for planning, scoping, execution, and reporting
• Contribute to the IT audit plan, with the opportunity to own it over time

AI-enabled audit

• Set standards for how the team uses AI across the audit lifecycle, including how AI-assisted work is reviewed, validated, and documented so our external auditor can rely on it
• Build reusable prompts, workflows, and automations, and coach the Sr. IT Internal Auditor on building and using them
• Support automated control testing and continuous monitoring, using SQL or Python for full-population analysis where it adds value
• Assess the risks of AI tools and agents in the financial reporting environment, including access, data handling, and change management
• Advise on control design for AI-driven processes, including AI agents and automated workflows that affect financial reporting
• Monitor and stay current on technical literature, emerging trends and best practices in IT audit and AI

Who you are

• A hands-on leader who coaches and develops others: sets clear priorities, gives direct and timely feedback, and reviews work for quality
• An AI-fluent auditor who can share concrete examples of using AI to do audit work faster or better, and who understands its limits (accuracy, confidentiality, over-reliance)
• Curious about how AI is reshaping both the risks we audit and how we audit them
• Strong understanding of SOX 404, PCAOB Auditing Standards, COSO 2013, COBIT, US GAAP, and Internal Audit Standards
• Deep understanding of ITGCs, IT application controls, interfaces, key reports, segregation of duties, and SOC 1 reviews for homegrown and off the shelf applications and cloud environments (e.g., AWS)
• Experience auditing modern engineering environments, including CI/CD pipelines, access defined in code, and automated data pipelines
• Experience leading planning, scoping, testing and reporting for a full year IT SOX program
• Experience leading technology audits (e.g., cloud, cybersecurity, data governance)
• Excellent written and verbal communication skills, including the ability to drive influence and to discuss technical concepts to other stakeholders in a simple but informative manner
• Exceptional analytical and problem-solving skills with great attention to details, and an investigative mindset to get to the root cause
• Excellent project management skills with cross functional teams
• Data analytics skills with experience in SQL, Python, Tableau, or any other data analytics or visualization tools
• Experience in using SOX GRC tools such as Optro (formerly AuditBoard) and ERP systems e.g. NetSuite is strongly preferred
• Working knowledge of AI governance frameworks (e.g., NIST AI RMF, ISO/IEC 42001) or AI audit credentials (e.g., ISACA AAIA) is a plus
• Comfortable working in a fast-paced, high growth environment

Education and Experience

• Bachelor's degree in Information Systems, Computer Science, Accounting, Business, or other relevant field
• 8+ years of IT audit experience in public accounting (i.e. Big 4 Accounting firms) and/or industry, including IT SOX controls testing, ideally in a Tech/SaaS environment
• Experience managing or coaching auditors and/or co-sourced resources
• Professional audit relevant certification - CISA preferred; CPA, CIA, or CISSP a plus

Physical Requirements

• Prolonged periods of sitting at a desk and working on a computer.
• Occasional travel