Senior Internal IT Auditor

Klaviyo • San Francisco, CA

4d • $100,000 - $150,000

About The Position

Klaviyo is seeking an experienced Senior Internal IT Auditor to join its Internal Audit function. The team partners with operational leaders to monitor and improve internal controls and processes and drive operating efficiencies. The function is building an AI-first audit approach, applying AI and automation across the audit lifecycle. The role focuses primarily on IT SOX controls—including IT General Controls, IT application controls, and key reports—across homegrown and third-party systems, with the opportunity to expand into broader technology audits over time.

The position reports to the VP of Internal Audit & Compliance and works closely with the Manager, IT SOX. It collaborates with stakeholders across IT, Security, Business Intelligence, Finance, Accounting, Legal, People Operations, Engineering, and Global Technology Solutions. The auditor supports the SOX program and wider audit projects, using AI tools responsibly with human review and documented validation. The role has no supervisory responsibilities and may require up to 10% travel, coordinated in advance.

The base salary range for U.S. locations is $100,000–$150,000. Total compensation may also include an annual cash bonus, equity, sign-on payments, and benefits, subject to eligibility. The offered salary depends on factors including relevant skills, experience, education or training, and work location.

Requirements

• Bachelor’s degree in Information Systems, Computer Science, Accounting, Business, or another relevant field.
• At least 5 years of IT audit experience in public accounting and/or industry, including IT SOX controls testing; experience in a technology or SaaS environment is ideal.
• Strong understanding of SOX 404, PCAOB Auditing Standards, COSO 2013, COBIT, U.S. GAAP, Internal Audit Standards, and audit processes and methodologies.
• Strong understanding of scoping, designing, and testing IT controls for homegrown and off-the-shelf applications and cloud environments such as AWS, including ITGCs, application controls, interfaces, key reports, segregation of duties, and SOC 1 reviews.
• Previous experience auditing ITGCs related to CI/CD pipelines.
• Experience planning, scoping, testing, and reporting within a full-year SOX program.
• Experience leading the planning, scoping, execution, and reporting of IT, operational, or financial audits.
• Data analytics skills and experience with SQL, Python, Tableau, or other analytics or visualization tools.
• Hands-on experience using AI tools in audit work, with concrete examples of improved speed or quality and an understanding of limitations such as accuracy, confidentiality, and over-reliance.
• Experience collaborating with internal or co-sourced consulting resources.
• Excellent written and verbal communication skills, including the ability to influence and explain technical concepts clearly to stakeholders.
• Strong analytical and problem-solving skills, attention to detail, and an investigative mindset focused on root causes.
• Initiative, curiosity to learn about AI and emerging technologies, and a high-energy, self-starting approach.
• Strong organizational skills, ability to prioritize workload, and ability to communicate status clearly.
• Comfort working in a fast-paced, high-growth environment.
• Professional audit-related certification; CISA is preferred, while CPA, CIA, or CISSP is a plus.
• Ability to meet the physical requirement of prolonged periods sitting at a desk and working on a computer, and occasional travel to office hubs.

Nice To Haves

• Experience using SOX GRC tools such as Optro (formerly AuditBoard) and ERP systems such as NetSuite.
• Working knowledge of AI governance frameworks such as NIST AI RMF or ISO/IEC 42001, or an AI audit credential such as ISACA AAIA.
• CISA certification preferred; CPA, CIA, or CISSP is a plus.
• IT audit experience in a technology or SaaS environment.

Responsibilities

• Collaborate with the Internal Audit team and company stakeholders to strengthen internal controls and continuously improve the SOX program.
• Advise system control owners on control design while maintaining Internal Audit’s independence from implementing or operating controls, and maintain the ITGC risk and control matrix in Optro.
• Conduct end-to-end system walkthroughs to identify SDLC controls, address risks, and evaluate ITGCs for homegrown applications and third-party SaaS, including code deployment and production access.
• Prepare audit documentation request lists, coordinate with control owners, and track request status.
• Perform periodic testing of control design and operating effectiveness, including developing test plans and audit workpapers in Optro.
• Assess and track audit findings and gaps, including control weaknesses, root causes, and severity; coordinate remediation with control owners through Optro.
• Prepare ITGC training materials when needed and review IT-related policies or provide recommendations to policy owners as needed.
• Guide internal stakeholders as they address control deficiencies or make significant process changes.
• Build and maintain effective relationships with process owners and stakeholders to increase awareness of risk, controls, and Internal Audit.
• Coordinate with co-sourced providers, external auditors, and internal business partners to support engagement, alignment, and timely execution of audit work and the SOX program.
• Develop and communicate status reporting for ITGC-related projects and internal audits.
• Test IT application controls over in-scope systems, including interfaces and integrations.
• Review SOC 1 reports, complementary user entity controls, and bridge letters for in-scope vendors.
• Test key reports used in key control operations, including information produced by the entity (IPE).
• Evaluate the design and implementation of segregation of duties controls.
• Evaluate IT controls designed to prevent or detect fraud, including management override of controls.
• Support internal audit projects, including technology audits such as cloud security, data governance, and AI governance; document planning, scoping, audit programs, and request lists; track and communicate observations and management action plans; and participate in or lead walkthroughs.
• Use AI tools across the audit lifecycle, such as for evidence review, walkthrough documentation, testing, and drafting observations, with human review and documented validation of outputs.
• Build and maintain reusable prompts, workflows, and automations, and identify opportunities to improve audit-project efficiency.
• Help define how Internal Audit validates AI-assisted work so the external auditor can rely on it.
• Assess risks of AI tools and agents in the financial reporting environment, including access, data handling, and change management.
• Perform other related duties as assigned.

Benefits

• The total compensation package may include participation in the company’s annual cash bonus plan.
• Equity may be included in the total compensation package.
• Sign-on payments may be included in the total compensation package.
• A comprehensive range of health, welfare, and wellbeing benefits based on eligibility.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior