Senior IT SOX Audit Manager| United States | Remote

Grafana Labs

23h•$163,000 - $195,000•Remote

About The Position

Grafana Labs is seeking a Senior Manager, IT SOX Audit to establish and manage the company's IT SOX program. This is a high-visibility, hands-on role reporting to the Head of Internal Audit, with significant interaction with Finance, IT, Engineering, Security, and senior leadership. Initially, this is an individual contributor role where you will architect and execute the IT SOX program, with the potential to expand into broader technology and IT audit and to build and lead a team as the function matures. The focus is on making Grafana more risk-intelligent and better controlled to support scaling. This role is ideal for someone who enjoys building from scratch, collaborating with stakeholders, and utilizing modern tools, including AI, for efficient and impactful assurance.

Requirements

10+ years of progressive experience in IT SOX compliance, IT audit, or IT risk advisory in Big 4 (or similar) and/or an in-house audit, compliance, or risk management function.
Proven hands-on expertise in COSO, SOX 404, ITGCs, ITACs, and PCAOB audit standards.
Experience standing up, scaling, or transforming an IT SOX program, ideally in a pre-IPO or newly public, high-growth SaaS environment.
Experience auditing cloud-native, SaaS environments and modern ERPs and business applications (e.g., NetSuite, Salesforce, Workday).
Track record of implementing or optimizing AI and automated compliance and audit capabilities.
Fluency in key frameworks such as COSO, COBIT, NIST CSF, and ISO 27001.
Experience with GRC / audit tools, or building home-grown solutions.
Strong project management and organizational skills with the ability to oversee complex programs and prioritize ruthlessly.
Proven ability to inform and influence senior management stakeholders. You can influence without authority and make technical risk clear, urgent, and actionable.
CISA, CPA, CIA, or CISSP strongly preferred.
High integrity, ownership, curiosity, and a continuous-improvement mindset.

Nice To Haves

A blend of both Big 4 (or similar) and in-house audit, compliance, or risk management leadership experience.
Experience in a pre-IPO and/or newly public, high-growth, consumption/usage-based SaaS technology company.
Additional certifications that signal breadth and depth: CPA, CISM, CRISC, or CGEIT.
ISACA AAIA (Advanced in AI Audit), or a demonstrated track record of investing in AI governance and audit innovation.
Experience broadening an audit function beyond SOX into technology, operational, or advisory assurance.
Experience working in globally distributed organizations.

Responsibilities

Partner with the Head of Internal Audit to build and operate Grafana's IT SOX program from the ground up: scoping, risk assessment, control design, and testing across IT general controls (ITGCs) and key application controls tied to financial reporting.
Design and execute all phases of IT SOX activity: walkthroughs, design and operating effectiveness testing, documentation, status tracking, deficiency identification, and remediation validation.
Assess ITGCs and application controls across key financial systems and Grafana's cloud/SaaS environment (e.g., NetSuite, Salesforce, Workday).
Own the IT SOX documentation library in partnership with the Business Process / Finance SOX lead (narratives, flowcharts, and IT risk-and-control matrices (RCMs)), and keep it audit-ready at all times.
Drive deficiency management conversations with control owners, advocating for automation-first, scalable remediation over manual, siloed patches.
Own the relationship with external IT auditors, ensuring testing methodologies and documentation meet PCAOB standards and align with external auditor expectations to create the foundation for a future reliance strategy.
Leverage AI and automation to enhance scoping, testing, and continuous monitoring, building capabilities and operationalizing insights, not just running checklists.
Evaluate the IT control impact of new systems, tools, operations, and policies as Grafana scales.
Manage co-source partner resources while maintaining quality and driving consistency across the program.
Report on IT SOX status, risks, deficiencies, and remediation to the Head of Internal Audit and senior leadership.
Over time, help extend the function beyond SOX into broader technology and IT audit, and build, mentor, and scale a team as the organization grows.