Senior IT SOX Auditor, Internal Audit

Company Overview

Docusign brings agreements to life. Over 1.5 million customers and more than a billion people in over 180 countries use Docusign solutions to accelerate the process of doing business and simplify people’s lives. With intelligent agreement management, Docusign unleashes business‑critical data that is trapped inside of documents. Until now, these were disconnected from business systems of record, costing businesses time, money, and opportunity.

Using Docusign’s Intelligent Agreement Management platform, companies can create, commit, and manage agreements with solutions created by the #1 company in e‑signature and contract lifecycle management (CLM).

As a Senior IT Auditor, you have in-depth knowledge of how to autonomously execute IT audits. This role sits within our global internal audit function and engages with business leaders, IT Management and our 2nd line of defense to plan and perform basic to complex enterprise‑wide IT, operational and regulatory audits (e.g., SOX, SOC, ISO). This responsibility includes performing internal audits of the system development life cycle, access controls, IT Automated Controls (ITACs), Key Calculations and Reports (KCRs), cyber security procedures, and third party risk management.

This position is an individual contributor role reporting to the Senior Manager, Internal Audit.

Responsibility

• Conduct IT risk assessment by understanding business objectives, internal controls, enabling technology, and IT infrastructure
• Assist in scheduling audit tests, and engage with auditees to acquire the necessary information
• Perform audit work over various technologies used by the company and various IT functions. Assess both the design and operating effectiveness of internal controls
• Evaluate controls crafted to prevent or detect fraud, including management override of controls
• Prepare and present findings as needed and communicate audit results and recommendations both orally and in writing to management
• Schedule and conduct presentations at meetings with auditees and management as needed
• Identify and implement processes to optimize efficiencies across audit projects
• Contribute to identification of department operational efficiencies and changes in auditing operations
• Maintain and continuously improve upon Internal Audit’s role and reputation as a trusted advisor
• Acquire additional knowledge of regulations and emerging technologies
• Remain informed of industry and risk management best practices, trends, and standards

Hybrid: Employee divides their time between in‑office and remote work. Access to an office location is required. (Frequency: Minimum 2 days per week; may vary by team but will be weekly in‑office expectation)

Positions at Docusign are assigned a job designation of either In Office, Hybrid or Remote and are specific to the role/job. Preferred job designations are not guaranteed when changing positions within Docusign. Docusign reserves the right to change a position's job designation depending on business needs and as permitted by local law.

Basic

• 5+ years audit experience, including testing ITGCs, ITACs, KCRs, SOX, SOC and ISO Certifications, identifying gaps, generating audit recommendations, and writing reports
• Experience with audit principles, such as risk assessment, materiality, and sufficiency of audit evidence
• Experience managing complex Audit workloads and competing priorities with clear communication and accountability
• Experience with relevant regulations and industry standards (e.g., SSAE 18/SOC, COSO, COBIT)
• Bachelor’s degree
• Fluent in English

Preferred

• Strong performance at the Senior Consultant level within a big‑4 or top tier consulting firm
• Bachelor’s degree in Accounting, Finance, MIS, IT or relevant field
• Certification in a relevant field (e.g., CISA, CISSP, CIA, and/or CPA certification)
• Experience working with a SaaS platform
• Experience with large cross‑functional and globally distributed teams
• Passion for audit, compliance, governance, information security, privacy and risk
• Investigative mindset with a passion for drilling down into technical complexities to understand the root‑cause of issues or…