Head of Gusto Controls

Gusto, Inc.•San Francisco, CA

6d•$188,510 - $272,906•Hybrid

About The Position

Gusto is hiring a Head of Internal Controls to join its Finance, BizOps & Strategy team. This leader will build and scale a forward-thinking internal controls environment that supports the company’s growth and operational maturity. The role leads a controls program covering business process controls and IT controls across proprietary and third-party systems supporting payroll, health benefits, retirement, and other financial products. The Head of Internal Controls will build the team, set the program strategy, and embed practical controls in the design and operation of Gusto’s products, systems, and financial processes. The role also defines an AI-forward approach to internal controls by applying AI to controls work and establishing oversight for AI-enabled financial processes and software development. The ideal candidate has built or scaled an ICFR program, led experienced teams, and can work collaboratively with accounting and technical leaders to translate risk into controls without unnecessary operational burden. The position may be based in Denver, San Francisco, or New York City. Employees based in these locations are expected to work from the office on designated days approximately 2–3 days per week, or more depending on the role. Approved work from another location requires a secure, reliable, and consistent internet connection. Gusto expects regular and predictable attendance whether employees work in-office, hybrid, or fully remote.

Requirements

12+ years of progressive experience in a Big 4 accounting firm, internal audit, or SOX compliance program in a complex, scaling organization.
5+ years of people leadership experience, including hiring, coaching, and developing experienced controls professionals.
Deep knowledge of US GAAP, the COSO framework, and requirements supporting management’s ICFR assessment and external auditor attestation.
Breadth across business process controls and IT controls, with depth in at least one discipline and the judgment to lead experienced specialists across both.
Experience in a technology-driven environment with proprietary applications, automated controls, complex data flows, high transaction volumes, and evolving products.
Ability to establish a long-term strategy and operating model while remaining close enough to the work to resolve ambiguous risks, challenge conclusions, and guide remediation.
Ability to influence senior leaders, translate technical and financial risks into practical decisions, and work credibly with Product, Engineering, external auditors, and the Audit Committee.
An AI-forward mindset, with current experimentation in AI and automation to improve internal controls work, including risk identification, evidence evaluation, testing, and monitoring.
Practical understanding of how AI changes the control environment, including risks from AI-generated code and AI-enabled financial processes, and ability to partner with Engineering and business teams on practical oversight.

Nice To Haves

Experience in fintech, payments, payroll, or financial services.
CPA, CIA, CISA, or a comparable professional certification.

Responsibilities

Build and lead Gusto’s internal controls function, combining business process controls and IT controls under one program and developing the team needed to support both areas.
Own the risk-based ICFR framework across financial processes and the systems and data that support them, including scoping, control design, documentation, testing, issue evaluation, and remediation.
Strengthen controls supporting Gusto’s complex operations, proprietary systems, and evolving products.
Partner early with Accounting, Finance, Product, Engineering, Data, Security, and Risk to incorporate control and auditability into new products, systems, and processes without unnecessary manual work or disruption.
Set the vision for an AI-forward internal controls function, using AI and automation to improve risk identification, evidence evaluation, control testing, and monitoring.
Establish practical oversight for risks introduced by AI-enabled financial processes and software development.
Lead relationships with external auditors and align on risk, scope, testing, evidence, and remediation.
Establish governance and accountability for internal controls, including company-wide training and reporting to senior management and the Audit Committee on program health and effectiveness.
Hire, coach, and develop experienced controls professionals and distribute judgment and institutional knowledge across the team.