Risk and Controls Program Manager

Spotify • New York, NY

322d • $119,210 - $170,300

About The Position

Spotify is seeking a Technology Risk and Controls Program Manager to lead critical risk and control initiatives within our Financial Engineering team. This role is crucial for ensuring the team's operations are secure, compliant, and scalable as Spotify continues to grow and diversify its business. In this role, you will partner with Product and Engineering leads within our R D organization as well as Finance teams to design and manage our controls framework while supporting the Spotify audit cycle. You will be instrumental in ensuring the effectiveness of our Engineering (IT) control environment, with a focus on Internal Controls over Financial Reporting (ICFR) and Sarbanes-Oxley (SOX) requirements.

Requirements

• Bachelor's degree in Accounting, Finance, Management Information Systems, or equivalent.
• 5+ years of experience in public accounting, risk and controls/IT compliance, Internal Audit, or an equivalent role.
• CPA/CISA or other relevant certification is strongly preferred.
• Big 4 experience is preferred.
• Knowledge of and experience working with software engineering teams and standard engineering methodologies, including Agile and CI/CD.
• Ability to work independently to plan, complete, and deliver on projects in an assigned organizational area.
• Excellent stakeholder management skills (i.e., expectation setting, education, prioritization, etc.).

Nice To Haves

• Experience with control environments related to financial SaaS systems, NetSuite or other similar cloud ERP is a plus.
• Experience working with multinational organizations and teams distributed across multiple time zones is a plus.

Responsibilities

• Partner with engineering, business, and internal audit teams to drive efforts related to Spotify's global Internal Controls over Financial Reporting (ICFR) and Sarbanes-Oxley (SOX) requirements.
• Liaise and translate risk and controls between the business process and IT General Controls (ITGC) environments across a complex systems landscape that follows an agile development approach.
• Collaborate with process and control owners to maintain an effective Engineering (IT) control environment, including recommendations for the design, implementation, and remediation of ITGCs and IT application controls.
• Provide training and support for system control owners and their teams to ensure effective operation of ITGCs and associated business process controls.
• Enable the efficient execution of our SOX compliance program and schedule by serving as the primary liaison between external audit and the R D Engineering teams you support.
• Provide thought leadership and risk and compliance support as our businesses, processes and technology evolve.
• Support major business and technology projects by providing risk analysis and control impact assessments while assisting in the implementation of any associated control or process changes.
• Monitor industry and regulatory (SEC, PCAOB) developments and develop recommendations for policy, process, technology, and internal control improvements.

Benefits

• Health insurance
• Six month paid parental leave
• 401(k) retirement plan
• Monthly meal allowance
• 23 paid days off
• 13 paid flexible holidays
• Paid sick leave

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Industry: Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services
• Education Level: Bachelor's degree