We're looking for a senior, hands-on leader to own IT audit and governance across all of our applications, infrastructure, and systems. You'll be accountable for keeping IT audit-ready every day: SOX ITGCs and ITACs, plus the broader audit and governance obligations that touch the technology stack (SOC reports, ISO, security and regulatory audits).

This role is about accountability and execution. You'll work with cross-functional IT leaders across Infrastructure, Engineering, Security, Cloud, Enterprise Applications, and Business Systems to make sure controls are owned, operated, evidenced, and remediated on time. You'll also be the primary IT liaison to Internal Audit, Finance/SOX PMO, and external auditors. You operate independently, influence without authority, and can speak credibly with an engineer about a CI/CD pipeline and with the CAO about a deficiency.

We're looking to speak with candidates based in Palo Alto or New York City for our hybrid working model.

What You'll Do

Own audit and governance across all IT

Own the audit and governance program across all IT applications, infrastructure, cloud platforms, and supporting systems
Maintain a complete inventory of systems, owners, and applicable audit and compliance obligations (SOX, SOC 1/SOC 2, ISO 27001, and other regulatory or customer requirements)
Build and run an IT audit calendar that coordinates SOX, internal audit, external audit, and compliance activities to reduce duplicate asks and audit fatigue
Establish governance standards, policies, and control frameworks that apply consistently across IT

Drive accountability and execution with IT leaders

Partner with cross-functional IT leaders to assign clear control and remediation ownership, with defined deadlines and escalation paths
Run regular governance forums and control health reviews with IT leadership, reporting status, risks, and overdue items
Hold teams accountable for timely control execution, evidence quality, and issue closure, escalating early when commitments slip
Translate audit and compliance requirements into practical work that engineering and infrastructure teams can adopt without slowing delivery

Own ITGC and ITAC compliance

Own the end-to-end SOX IT program: scoping inputs, control design, ownership, evidence, readiness testing, and issue management
Maintain the ITGC framework (access management, change management, IT operations, SDLC) across all in-scope applications, databases, operating systems, and cloud infrastructure
Own ITAC strategy and coverage with Finance and business-system owners: automated controls, configurations, interfaces, calculations, and approval workflows
Own IPE/report validation, ITAC baselines, and segregation of duties (SoD) across ERP and key financial applications

Design, operate, and strengthen controls

Design controls that are engineered into IT workflows (ticketing, CI/CD, IAM, CMDB) rather than layered on manually
Run readiness and self-assessment testing ahead of Internal Audit and external auditor testing
Rationalize overlapping controls across frameworks so one control and one piece of evidence can satisfy multiple requirements
Drive automation and continuous control monitoring to reduce manual effort and audit burden
Manage SOC 1/SOC 2 report reviews, CUECs, and third-party/vendor control dependencies

Drive remediation and issue management

Own the issue lifecycle across IT, from identification and root cause through remediation plan, validation, and closure
Prepare management's response to audit findings and provide the IT perspective on deficiency severity with Finance, Legal, and Internal Audit
Report control health and remediation status to IT leadership, the CAO, and the Audit Committee as needed

Be the IT face to auditors and the business

Serve as primary IT contact for Internal Audit and external auditors on scope, walkthroughs, evidence requests, and reliance strategy
Coordinate PBC requests, evidence standards, and timelines across IT teams
Train and enable control owners and IT leaders on audit requirements, evidence quality, and their responsibilities