Develop and execute a risk-based technology compliance strategy across key frameworks (SOX, PCAOB, COSO, COBIT), aligning controls to business objectives.
Lead control Performance, walkthrough, review, deficiency management, remediation efforts of SOX controls
Design, implement, and continuously improve IT controls across access management, change management, incident response, and data governance.
Lead Quality testing of control evidence, address any feedback given by external auditors on evidence review.
Partner cross-functionally with Engineering, IT, Security, Legal, and Finance to embed compliance-by-design into systems and operations.
Drive automation, continuous monitoring, and process optimization to enhance control effectiveness and reduce manual effort.
Identify the opportunity to leverage AI to perform deep dive analysis, identify automation opportunity using Agentic AI
Requirements
Deep experience in technology compliance, IT audit, or technology risk management
Strong knowledge of major compliance frameworks (SOX ITGCs, PCI DSS, SOC2, GDPR, WCAG)
Experience managing end-to-end internal and external audit engagements
Expertise in cloud environments (GCP, AWS), GitHub, Kubernetes / terraform and Business Operations SaaS platform control configurations
Exceptional stakeholder management and communication skills across technical, engineering and audiences
Demonstrated experience in people management: motivating and working with high performing teams.
Knowledge of control frameworks such as SOC 2, ISO27001, COBIT or NIST CSF (preferred)
Relevant certifications (CISA, CISSP, CRISC, PMP, or similar) (preferred)
Experience in a large public company, Big 4 Audit firm, or regulated environment (preferred)
Tech Stack
AWS
Cloud
Google Cloud Platform
Kubernetes
PMP
Terraform
Benefits
Comprehensive health, life, and disability insurance
Commute subsidy
Employee stock ownership
Competitive retirement/pension plans
Generous vacation and personal days
Support for new parents through leave and family-care programs