Senior Internal IT Auditor

Klaviyo•Boston, MA

4d•$100,000 - $150,000

About The Position

Klaviyo’s Internal Audit function partners with operational leaders to monitor and improve internal controls and processes and drive operating efficiencies. The Senior Internal IT Auditor will help strengthen the internal control environment and continuously improve the SOX program, with a primary focus on IT SOX controls—including IT General Controls, IT application controls, and key reports—across homegrown and third-party systems. The role may expand to broader technology audits over time. The position reports to the VP of Internal Audit & Compliance and works closely with the Manager, IT SOX, as well as stakeholders across IT, Security, Business Intelligence, Finance, Accounting, Legal, People Operations, Engineering, and Global Technology Solutions. The successful candidate will be an experienced audit professional who uses AI in day-to-day work and is comfortable in a fast-paced, evolving environment. Klaviyo is building an AI-first audit function that uses AI and automation across the audit lifecycle. The role includes using AI tools with human review and documented validation, developing reusable prompts and workflows, helping define validation methods for AI-assisted work, and assessing risks posed by AI tools and agents in the financial reporting environment. The role may require up to 10% travel, coordinated in advance. The stated U.S. base pay range is $100,000–$150,000. Total compensation may also include an annual cash bonus, equity, sign-on payments, and eligible health, welfare, and wellbeing benefits.

Requirements

Strong understanding of SOX 404, PCAOB Auditing Standards, COSO 2013, COBIT, U.S. GAAP, and Internal Audit Standards, including auditing processes and methodologies.
Strong understanding of scoping, designing, and testing IT controls for homegrown and off-the-shelf applications and cloud environments such as AWS, including ITGCs, application controls, interfaces, key reports, segregation of duties, and SOC 1 reviews.
Previous experience auditing ITGCs related to CI/CD pipelines.
Experience planning, scoping, testing, and reporting within a full-year SOX program.
Experience leading the planning, scoping, execution, and reporting of IT, operational, or financial audits.
Data analytics skills using SQL, Python, Tableau, or other analytics or visualization tools.
Hands-on experience using AI tools in audit work, with concrete examples of improving speed or quality and an understanding of limitations such as accuracy, confidentiality, and over-reliance.
Experience collaborating with internal or co-sourced consulting resources.
Excellent written and verbal communication skills, including the ability to influence and explain technical concepts clearly to stakeholders.
Strong analytical and problem-solving skills, attention to detail, and an investigative approach to identifying root causes.
Initiative, curiosity to learn about AI and emerging technologies, and a high-energy, self-starting approach.
Strong organization and prioritization skills, with the ability to communicate status clearly.
Bachelor’s degree in Information Systems, Computer Science, Accounting, Business, or another relevant field.
At least 5 years of IT audit experience in public accounting and/or industry, including IT SOX controls testing; experience in a technology or SaaS environment is ideal.

Nice To Haves

Experience using SOX GRC tools such as Optro (formerly AuditBoard) and ERP systems such as NetSuite.
Working knowledge of AI governance frameworks such as NIST AI RMF or ISO/IEC 42001, or AI audit credentials such as ISACA AAIA.
CISA certification preferred; CPA, CIA, or CISSP certification is a plus.

Responsibilities

Collaborate with the Internal Audit team and the company to strengthen the internal control environment and continuously improve the SOX program.
Advise system control owners on control design while maintaining Internal Audit’s independence from implementing or operating controls; maintain the ITGC risk and control matrix in Optro.
Conduct end-to-end system walkthroughs to identify SDLC controls, address risks, and evaluate ITGCs for homegrown applications and third-party SaaS, including code deployment and production access.
Prepare audit documentation request lists, coordinate with control owners, and track request status.
Test control design and operating effectiveness, including building test plans and audit workpapers in Optro.
Assess and track audit findings and gaps, including control weaknesses, root causes, and severity; coordinate remediation with control owners through Optro.
Prepare ITGC control training materials when needed and review IT-related policies or provide recommendations to policy owners.
Guide and support internal stakeholders as they address control deficiencies or make significant process changes.
Build positive working relationships with process owners and stakeholders to increase awareness of risk, controls, and Internal Audit.
Coordinate with co-sourced providers, external auditors, and internal business partners to support engagement, alignment, and timely execution of audit work and the SOX program.
Develop and communicate status reporting for ITGC projects and internal audits.
Perform IT application control testing over in-scope systems, including interfaces and integrations.
Review SOC 1 reports, complementary user entity controls, and bridge letters for in-scope vendors.
Test key reports used in key control operations, including information produced by the entity (IPE).
Evaluate the design and implementation of segregation of duties controls.
Evaluate IT controls designed to prevent or detect fraud, including management override of controls.
Support internal audit projects, including technology audits such as cloud security, data governance, and AI governance; document planning, scoping, audit programs, and request lists; track and communicate observations and management action plans; and participate in or lead walkthroughs.
Use AI tools across the audit lifecycle, including evidence review, walkthrough documentation, testing, and drafting observations, with human review and documented validation.
Build and maintain reusable prompts, workflows, and automations, and identify ways to improve audit project efficiency.
Help define how Internal Audit validates AI-assisted work so the external auditor can rely on it.
Assess risks of AI tools and agents in the financial reporting environment, including access, data handling, and change management.
Perform other related duties as assigned.