Senior IT SOX Audit Manager

This is a fully remote position, open to applicants in United States.

📋 Description

• Develop and manage Grafana Labs’ IT SOX program from inception, encompassing scoping, risk assessment, control design, and testing related to ITGCs and critical application controls linked to financial reporting.

• Conduct walkthroughs, design and operational effectiveness testing, documentation, status tracking, identification of deficiencies, and validation of remediation efforts.

• Evaluate ITGCs and application controls within financial systems and cloud/SaaS environments, including NetSuite, Salesforce, and Workday.

• Oversee the IT SOX documentation library, which includes narratives, flowcharts, and matrices for IT risk and control.

• Lead deficiency management initiatives and promote an automation-first, scalable approach to remediation.

• Build and maintain relationships with external IT auditors, ensuring alignment of testing methodologies and documentation with PCAOB standards.

• Leverage AI and automation to enhance scoping, testing, and ongoing monitoring processes.

• Assess the impact of new systems, tools, operations, and policies on IT controls.

• Manage resources from co-source partners, ensuring program quality and consistency.

• Provide updates on IT SOX status, risks, deficiencies, and remediation efforts to the Head of Internal Audit and senior leadership.

• Gradually expand the function to encompass broader technology and IT audit areas, while building, mentoring, and scaling a team.

⛳️ Requirements

• Over 10 years of progressive experience in IT SOX compliance, IT audit, or IT risk advisory roles.

• Background in Big 4 or similar firms, and/or experience in in-house audit, compliance, or risk management functions.

• Practical knowledge of COSO, SOX 404, ITGCs, ITACs, and PCAOB audit standards.

• Proven experience in establishing, scaling, or transforming an IT SOX program.

• Familiarity with auditing cloud-native SaaS environments and modern ERPs and business applications, including NetSuite, Salesforce, or Workday.

• Experience in implementing or enhancing AI and automated compliance and audit capabilities.

• Proficiency in COSO, COBIT, NIST CSF, and ISO 27001 frameworks.

• Experience with GRC/audit tools or developing custom solutions.

• Strong project management abilities and organizational skills.

• Capability to influence senior management and communicate technical risks in a clear and actionable manner.

• CISA, CPA, CIA, or CISSP certifications are highly preferred.

• High integrity, a sense of ownership, curiosity, and a mindset focused on continuous improvement.

• Bonus: Leadership experience in Big 4 or in-house settings; pre-IPO or newly public SaaS experience; additional certifications such as CPA, CISM, CRISC, CGEIT, or ISACA AAIA; experience in expanding audit beyond SOX; experience in globally distributed organizations.

🏝️ Benefits

• Restricted Stock Units (RSUs) for every team member.

• 100% remote work with a global culture.

• Opportunities for career advancement.

• In-person onboarding experience.

• A global annual leave policy providing 30 days per year.

• Three annual leave days allocated for Grafana Shutdown Days.

• Open communication and regular updates across the company.

• Autonomy and support to deliver exceptional work and explore new ideas.

• A culture of empowerment, high trust, and low ego.

• Leadership that is approachable and actively involved.