At a glance
- Experience
- 8+ years experience
- Location
- Boston
- Salary
- USD 124,000-186,000 · Base salary
About the role
- Klaviyo is looking for an experienced Manager, IT SOX to lead our IT SOX program and technology audits.
- This person will report to the VP of Internal Audit & Compliance, manage and coach the Sr. IT Internal Auditor day to day, and work directly with key stakeholders across IT, Security, Business Intelligence, Finance, Accounting, Legal, People Operations, Engineering & Global Technology Solutions within the company.
- The primary focus of the role is IT SOX controls across our homegrown and third-party systems, along with leading risk-based technology audits.
Responsibilities
- Day-to-day management and coaching of the Sr. IT Internal Auditor, including setting priorities, reviewing workpapers, and providing feedback and development
- Oversight of co-sourced IT testing, including review of workpapers for quality and consistency
- Own the annual IT SOX plan, including risk assessment, scoping of in-scope systems, and alignment with our external auditor on reliance and timing
- Scale and rationalize IT SOX scope as Klaviyo’s systems and business evolve
- Lead end-to-end execution of the IT SOX program across ITGCs, IT application controls, system interfaces and integrations, key reports/IPE, and segregation of duties, across homegrown applications and third-party SaaS
- Maintain the ITGC risk and control matrix within Optro, our SOX project management system
- Review SOC 1 reports, complementary user entity controls, and bridge letters for in-scope vendors
- Evaluate IT deficiencies, including root cause and severity, and drive remediation with control owners through closure
- Coordinate with co-sourced third party providers, external auditors, and internal business partners to ensure alignment and timely execution of IT SOX work
- Lead risk-based technology audits (e.g., cloud security, cybersecurity, data governance, AI governance), with accountability for planning, scoping, execution, and reporting
Requirements
- Bachelor's degree in Information Systems, Computer Science, Accounting, Business, or other relevant field
- 8+ years of IT audit experience in public accounting and/or industry, including IT SOX controls testing, ideally in a Tech/SaaS environment
- Experience managing or coaching auditors and/or co-sourced resources
- Professional audit relevant certification - CISA preferred; CPA, CIA, or CISSP a plus
- Strong understanding of SOX 404, PCAOB Auditing Standards, COSO 2013, COBIT, US GAAP, and Internal Audit Standards
- Deep understanding of ITGCs, IT application controls, interfaces, key reports, segregation of duties, and SOC 1 reviews for homegrown and off the shelf applications and cloud environments
- Experience auditing modern engineering environments, including CI/CD pipelines, access defined in code, and automated data pipelines
- Experience leading planning, scoping, testing and reporting for a full year IT SOX program
- Experience leading technology audits
- Excellent written and verbal communication skills, including the ability to drive influence and to discuss technical concepts to other stakeholders in a simple but informative manner
Preferred qualifications
- Experience in using SOX GRC tools such as Optro and ERP systems e.g. NetSuite is strongly preferred
- Working knowledge of AI governance frameworks or AI audit credentials is a plus
Benefits
- Annual cash bonus plan
- Variable compensation (OTE) for sales and customer success roles
- Equity
- Sign-on payments
- Comprehensive range of health, welfare, and wellbeing benefits based on eligibility
Workplace
- Occasional travel
- This role may require up to 10% travel for purposes such as new hire onboarding, client or partner work if applicable, team meetings, and industry events.
Skills
- SQL
- Python
- Tableau
- NetSuite
- Optro
- AWS
- CISA
- CPA
- CIA
- CISSP
