Manager, IT SOX

Klaviyo • Boston, MA

22h • $124,000 - $186,000

About The Position

Klaviyo’s Internal Audit function partners with operational leaders to monitor and improve internal controls and processes and drive operating efficiencies. The company is building an AI-first audit function that uses AI and automation across the audit lifecycle. The Manager, IT SOX leads the IT SOX program and technology audits, reports to the VP of Internal Audit & Compliance, and manages and coaches the Sr. IT Internal Auditor. The role works with stakeholders across IT, Security, Business Intelligence, Finance, Accounting, Legal, People Operations, Engineering, and Global Technology Solutions. Its primary focus is IT SOX controls—including IT general controls, application controls, and key reports—across homegrown and third-party systems, as well as risk-based technology audits.

The manager owns and executes the annual IT SOX plan, oversees co-sourced testing, advises on SOX readiness for system implementations and significant changes, and reports on progress, risks, and remediation. The role also leads technology audits and establishes standards for responsible, documented AI use in audit work, including reusable prompts and workflows, automated testing, and continuous monitoring. The position includes day-to-day management and coaching of the Sr. IT Internal Auditor and oversight of co-sourced IT testing.

The role requires a hands-on leader with substantial IT audit and SOX experience, strong technical and analytical skills, effective cross-functional communication and project management, and the ability to apply AI responsibly. A bachelor’s degree in a relevant field and 8 or more years of IT audit experience are required. The role may require up to 10% travel. The U.S. base pay range is $124,000–$186,000; total compensation may also include an annual cash bonus, equity, sign-on payments, and eligible health, welfare, and wellbeing benefits.

Requirements

• Bachelor’s degree in Information Systems, Computer Science, Accounting, Business, or another relevant field.
• At least 8 years of IT audit experience in public accounting and/or industry, including IT SOX controls testing; technology or SaaS experience is ideal.
• Experience managing or coaching auditors and/or co-sourced resources.
• Strong understanding of SOX 404, PCAOB Auditing Standards, COSO 2013, COBIT, US GAAP, and Internal Audit Standards.
• Deep understanding of IT general controls, application controls, interfaces, key reports, segregation of duties, and SOC 1 reviews for homegrown and off-the-shelf applications and cloud environments such as AWS.
• Experience auditing modern engineering environments, including CI/CD pipelines, access defined in code, and automated data pipelines.
• Experience leading planning, scoping, testing, and reporting for a full-year IT SOX program.
• Experience leading technology audits, such as cloud, cybersecurity, or data governance audits.
• Excellent written and verbal communication skills, including the ability to influence stakeholders and explain technical concepts clearly.
• Strong analytical and problem-solving skills, attention to detail, and an investigative approach to identifying root causes.
• Excellent project management skills in cross-functional settings.
• Data analytics skills and experience with SQL, Python, Tableau, or other analytics or visualization tools.
• AI fluency, with concrete examples of using AI to improve or accelerate audit work and an understanding of its limitations, including accuracy, confidentiality, and over-reliance.
• Ability to coach and develop others, set priorities, give timely feedback, and review work for quality.
• Curiosity about how AI is changing audit risks and audit methods.
• Comfort working in a fast-paced, high-growth environment.

Nice To Haves

• CISA certification is preferred; CPA, CIA, or CISSP is a plus.
• Experience with SOX GRC tools such as Optro (formerly AuditBoard) and ERP systems such as NetSuite is strongly preferred.
• Working knowledge of AI governance frameworks such as NIST AI RMF or ISO/IEC 42001, or AI audit credentials such as ISACA AAIA, is a plus.
• Experience in a technology or SaaS environment is ideal.

Responsibilities

• Own the annual IT SOX plan, including risk assessment, system scoping, and alignment with the external auditor on reliance and timing.
• Scale and rationalize IT SOX scope as the company’s systems and business evolve.
• Lead end-to-end IT SOX execution across IT general controls, application controls, interfaces and integrations, key reports and IPE, and segregation of duties for homegrown applications and third-party SaaS.
• Maintain the ITGC risk and control matrix in Optro.
• Review SOC 1 reports, complementary user entity controls, and bridge letters for in-scope vendors.
• Evaluate IT deficiencies, including root cause and severity, and drive remediation through closure.
• Coordinate co-sourced providers, external auditors, and internal business partners to support aligned and timely IT SOX work.
• Provide SOX readiness advice for new system implementations and significant changes, including SDLC controls, while maintaining Internal Audit’s independence from implementing or operating controls.
• Train and enable control owners on IT SOX expectations.
• Report IT SOX progress, risks, and remediation to Internal Audit leadership and stakeholders.
• Manage and coach the Sr. IT Internal Auditor by setting priorities, reviewing workpapers, and providing feedback and development.
• Oversee co-sourced IT testing and review workpapers for quality and consistency.
• Lead risk-based technology audits, including planning, scoping, execution, and reporting; contribute to the IT audit plan and potentially own it over time.
• Establish standards for AI use across the audit lifecycle, including review, validation, and documentation of AI-assisted work.
• Build reusable AI prompts, workflows, and automations and coach the Sr. IT Internal Auditor in their use.
• Support automated control testing and continuous monitoring, using SQL or Python for full-population analysis where useful.
• Assess AI tool and agent risks in financial reporting, including access, data handling, and change management.
• Advise on control design for AI-driven processes affecting financial reporting.
• Monitor technical literature, emerging trends, and best practices in IT audit and AI.
• Perform other related duties as assigned.

Benefits

• Comprehensive health, welfare, and wellbeing benefits based on eligibility.
• Participation in the company’s annual cash bonus plan may be included in total compensation.
• Equity may be included in total compensation.
• Sign-on payments may be included in total compensation.

What This Job Offers

• Job Type: Full-time
• Career Level: Manager