Senior Technical Compliance Manager

Come join the Intuit GRC organization! We are looking for an innovative professional to join a world class team.

Intuit's GRC function is transforming from manual, check-the-box compliance to an AI-native operating model — audit evidence pipelines, automated control testing, and agentic workflows that give auditors and executives leverage instead of busywork. We're looking for a motivated, technically fluent Senior Technical Compliance Manager who can sit at the intersection of compliance domain expertise and engineering execution: someone who understands SOC 1/2, access reviews, and control testing well enough to translate those requirements into concrete engineering tasks, and who can partner directly with engineers (or build the automation themselves) to ship it.

This is not a traditional risk-assessment TCM role. The Senior TCM, GRC AI Innovation owns the requirements-to-delivery bridge for our AI-driven audit and compliance tooling — defining what 'correct' looks like for an automated control test, specifying data/evidence requirements, validating pipeline output against audit standards, and working hands-on with engineering to close gaps. You will have the opportunity to reimagine how compliance work gets done at Intuit, working boundarylessly across GRC, engineering, and internal audit.

• Translate compliance and audit requirements (SOC 1/2, ISO 27001, access reviews, PBC evidence cycles, internal controls) into clear, engineering-ready specifications and acceptance criteria
• Partner directly with engineers building GRC automation and AI pipelines — reviewing designs, validating outputs against audit/control standards, and flagging compliance risk before it ships
• Own end-to-end delivery of prioritized GRC AI initiatives: evidence pipelines, automated control testing, workpaper generation, audit dashboards
• Serve as the compliance subject matter expert in engineering design discussions, ensuring automation reflects the actual control intent, not just a literal reading of the requirement
• Validate AI-generated audit artifacts (work papers, evidence mappings, control testing results) for accuracy, defensibility, and auditor-readiness
• Identify opportunities to automate manual GRC processes; scope, prioritize, and drive them through to production
• Define metrics for pipeline health, evidence coverage, and audit‑readiness; report progress to GRC leadership
• Build and maintain a working knowledge of the internal controls environment, evidence sources, and prior-year work papers well enough to spot when automated output is wrong
• Promote a culture of AI-forward, evidence-based compliance across the GRC organization

• BA/BS in Engineering, Computer Science, Information Systems, Accounting, or equivalent
• 5+ years of experience in technical compliance, IT audit, SOC 1/2, or GRC roles, with direct exposure to control testing and audit evidence
• Demonstrated ability to translate compliance/audit requirements into engineering specifications — you can read a control objective and tell an engineer exactly what the automation needs to check
• Comfortable working directly with engineers on design and requirements; enough technical fluency to review scripts, data pipelines, or automation logic without needing it re‑explained
• Familiarity with AI/LLM-based tooling (Claude, ChatGPT, agentic workflows) and genuine interest in applying it to compliance and audit work
• Working knowledge of SOC 1/2, ISO 27001, PCI DSS, NIST 800-53, or SOX 302/404 control frameworks
• Experience validating or QA'ing automated or AI-generated outputs against a defined standard (audit, engineering, or otherwise)
• Strong program management skills — able to scope initiatives, sequence work, and drive cross-functional delivery…