Director, SOX Compliance & Internal Controls

Fivetran • Oakland, CA

6h • $180,830 - $226,038 • Hybrid

About The Position

Fivetran is building its SOX Compliance function from the ground up. Reporting directly to the Chief Accounting Officer (CAO), the Director, SOX Compliance & Internal Controls will design and establish the company's internal controls program using the COSO framework. The role includes developing risk and control matrices, narratives, and test plans for business process controls, IT application controls, and IT general controls. The director will own relationships with third-party control-testing providers and the external audit team as Fivetran progresses through SOX readiness and 404(a) compliance.

This highly visible, build-phase role has significant latitude and accountability to shape the company's control environment, tooling, and governance model. The director will partner with Accounting, India CoE, FP&A, Legal, HROps, Revenue, IT/Engineering, Security, and control owners across the business.

This is a full-time hybrid position based in Fivetran's Oakland, California office. The hybrid model includes remote flexibility and one day in the office each week for team collaboration.

Requirements

• 10 or more years of progressive experience in internal audit, SOX/internal controls, or external audit.
• Meaningful experience in public accounting at a Big 4 or large national firm, focused on SOX/ICFR, IT audit, or integrated audit.
• Deep, hands-on knowledge of the COSO Internal Control Integrated Framework and PCAOB auditing standards.
• Strong knowledge of business process controls, including O2C, P2P, R2R, payroll and equity, treasury, and tax, as well as ITGC and ITAC concepts.
• Ability to discuss system architecture and control design credibly with engineers.
• Direct experience managing or co-sourcing control testing with third-party providers.
• Experience owning the day-to-day relationship with a Big 4 external audit team.

Nice To Haves

• Experience taking a company through IPO/SOX readiness and a first-year 404(b) audit, or leading an established public-company SOX program in the technology/SaaS industry.
• Bachelor’s degree in Accounting, Finance, or a related field.
• CPA, CIA, and/or CISA certification.
• Experience with NetSuite or a comparable ERP, Salesforce, and modern data/billing stacks used by usage-based businesses.
• Prior experience as the first or founding SOX hire at a pre-IPO company, building the function from zero.
• Familiarity with SOC 1 Type II report evaluation and vendor/subservice organization risk.
• Project management skills; PMP/PMO exposure is a plus.

Responsibilities

• Design, build, and lead Fivetran’s end-to-end SOX 404 compliance program in accordance with the COSO 2013 framework and 404(b) integrated audit standards.
• Lead risk assessment and scoping for significant accounts, processes, and locations in partnership with external auditors.
• Build and maintain risk and control matrices, process narratives, and flowcharts for key financial processes, including order-to-cash/revenue, procure-to-pay, payroll and equity compensation, treasury, financial close and reporting, tax, and entity-level controls.
• Design and document efficient, right-sized, audit-ready preventive and detective controls, both manual and automated.
• Build an AI-enabled SOX/GRC workflow tool to manage controls, testing, issues, and evidence.
• Partner with Engineering, IT, and Security to design and test IT general controls and IT application controls across in-scope systems.
• Build segregation-of-duties analysis and monitoring across key financial systems.
• Advise technical teams on control design for new systems, integrations, and process changes; evaluate vendor SOC 1/SOC 2 reports and determine reliance.
• Develop design and operating effectiveness test plans and testing strategies for in-scope business-process controls and ITGC/ITAC.
• Manage third-party co-source or outsource providers performing SOX testing, including engagement scoping, workpaper quality standards, and review of results before submission to external auditors.
• Own the primary relationship with KPMG for SOX/ICFR matters, coordinate walkthroughs, manage PBC requests, present testing results and evidence, and resolve open items.
• Track and drive remediation of control deficiencies through closure, including root-cause analysis and retesting; assess and present deficiency severity to management.
• Prepare periodic SOX program status, testing results, and open-issue reports for the CAO, CFO, and Audit Committee.
• Train and coach control owners on internal control responsibilities, control execution, and evidence standards.
• Embed controls in new processes, systems, and M&A integrations, favoring automation and preventive-at-the-source design.
• Monitor business changes, including new products, systems, revenue streams, and acquisitions, for control impact and update scope and documentation.
• Establish the program's long-term operating rhythm, including quarterly control self-assessments, a quarterly sales questionnaire, and related-party certifications.

Benefits

• 100% employer-paid medical insurance.
• Paid vacation or flexible/unlimited vacation, depending on role and country, paid sick time, inclusive parental leave, paid holidays, a year-end Global Week of Rest, and volunteer days off.
• RSU stock grants.
• Professional development and training opportunities.
• Company virtual happy hours, free food, and team-building activities.
• Monthly cell phone stipend.
• Access to a mental health support platform offering therapy, coaching, and self-guided mindfulness resources for covered employees and their covered dependents.

What This Job Offers

• Job Type: Full-time
• Career Level: Director
• Education Level: No Education Listed