IT Internal Audit Senior Manager

IT Internal Audit Senior Manager - Remote Eligible About the Role

We are seeking an experienced IT Internal Audit Senior Manager to join our Internal Audit team s role plays a critical part in executing our audit strategy and supporting the effective operation of the Internal Audit function. The primary focus will be on SOX compliance related to IT systems and select business processes. You will set the standard for documenting financial processes and their supporting IT/data systems, and identify opportunities to optimize our internal control environment.

This is a full‑time, remote position based in California (United States). If located near an office, you are expected to work from that office 3 days per week.

• Lead and manage all aspects of the IT SOX Compliance Program, including IT General Controls (ITGCs), automated controls, segregation of duties, and key report testing.
• Coordinate and communicate with the external auditor on internal controls over financial reporting; oversee resolution of audit findings.
• Develop deep understanding of end‑to‑end business processes, critical IT systems, and data flows impacting financial reporting.
• Conduct risk assessments and lead SOX scoping for new systems, product launches, process changes, and infrastructure upgrades.
• Provide expertise in design, implementation, and evaluation of ITGCs and IT Application Controls (ITACs) in collaboration with Corporate Engineering, Cybersecurity, and IT leadership.
• Oversee control walkthroughs, process narratives, system inventories, and quality assurance documentation across all SOX IT areas.
• Coordinate and review testing of ITGCs, key reports, SOC 1 reports, IPEs, and automated controls; assess evidence for accuracy and completeness.
• Evaluate and monitor control deficiencies, ensure timely remediation, and support continuous control maturity improvements.
• Identify opportunities to streamline controls and leverage technology for improved testing, monitoring, and documentation efficiency.
• Collaborate cross‑functionally with process owners and leadership to promote ownership, strengthen the control environment, and enhance compliance accountability.
• Support internal audits related to IT operations, cybersecurity, data governance, and participate in risk‑based audit plan development.
• Prepare insights, findings, and updates for Finance Leadership and the Audit Committee.

• 10+ years of experience in IT audit, IT risk management, or internal controls with SOX compliance in a public company environment.
• Deep understanding of PCAOB/SEC requirements, ITGCs, ITACs, IPE testing, and control evaluation.
• Experience successfully building and executing risk‑based audit plans aligned with business and IT risks.
• Strong knowledge of system development lifecycle, change management, and access provisioning.
• Excellent project management, organizational, and documentation skills.
• Effective verbal and written communication skills for cross‑functional engagement and leadership alignment.
• Experience collaborating with external auditors and managing expectations.

• Experience with audit data analytics tools and automation technologies.
• Big 4 public accounting firm experience working on publicly traded companies.
• Familiarity with cloud security and emerging technologies.
• Background in cybersecurity risk assessments and frameworks (e.g., NIST, ISO).
• Hands‑on experience with SOX project management software or audit platforms.
• Preferred certifications: CPA, CISA, CISSP, CIA.
• Experience in dynamic tech or high‑growth environments.
• Ability to work in our San Francisco HQ approximately once per week.
• Compliance audit experience with a CA‑based company.

• Comprehensive Medical,…