Senior Manager, Internal Audit

Navan•San Francisco, CA

About The Position

Navan is seeking a Senior Manager, Internal Audit to join its team in the San Francisco Bay Area. The role executes risk-based internal audits, assists with the Sarbanes-Oxley (SOX) compliance program, and provides risk advisory support for strategic initiatives. It partners with management and external service providers to evaluate and strengthen internal controls and identify opportunities to improve operational effectiveness and risk management. The Senior Manager leads complex audit engagements, supports enterprise risk management activities and Audit Committee reporting, and advises on strategic initiatives. The position reports to the VP, Head of Audit, Risk, and Compliance, with significant exposure to executive leadership. The role leads operational, financial, compliance, and integrated audits, contributes to risk assessments and the annual audit plan, and evaluates governance, risk management, compliance, and internal control processes. It supports SOX planning, scoping, risk assessment, testing, reporting, remediation tracking, and management’s annual assessment of internal controls over financial reporting. It also coordinates co-sourced audit providers, leads and mentors audit staff and external resources, and ensures audit work meets quality and documentation standards. The Senior Manager provides risk-focused advisory support for transformation initiatives, ERP implementations, automation, and business process redesign without taking on management responsibility. The role builds relationships with senior leaders, presents audit results and recommendations to executives, supports Audit Committee communications, and partners with the enterprise risk management leader on related initiatives. Travel domestically and internationally may be required as business needs dictate.

Requirements

8–10 years of progressively responsible experience in IT or internal audit, SOX compliance, public accounting, risk management, or a related field.
At least 5 years in a leadership role, including leading audit engagements, programs, or teams.
Significant experience leading operational and technology audits from planning and scoping through testing, reporting, and remediation follow-up.
Experience leading or managing IT SOX compliance for a publicly traded company, including IT general controls, automated controls, segregation of duties, and deficiency evaluation.
Experience assessing control design and operating effectiveness and supporting timely, sustainable remediation.
Experience coordinating with external auditors, consulting firms, and co-sourced service providers.
Experience supervising audit professionals, reviewing work products, and providing clear direction and feedback.
Ability to engage independently with director-, vice president-, and executive-level stakeholders and clearly communicate complex risk and control matters.
Experience preparing audit reports and presenting results and recommendations to senior management.
Strong knowledge of internal control and risk frameworks, including the COSO Internal Control—Integrated Framework, SOX Section 404 requirements, and risk assessment methodologies.
Understanding of IT control environments, including access management, change management, IT operations, and controls over cloud and SaaS applications.
Ability to travel domestically and internationally as business needs require.
Bachelor’s degree in Accounting, Finance, Business Administration, Information Systems, or a related field.
Active Certified Internal Auditor (CIA) credential issued by The Institute of Internal Auditors, or active Certified Public Accountant (CPA) license issued by a state board of accountancy.

Nice To Haves

MBA or master’s degree in Accounting, Finance, or a related discipline.
CPA credential; candidates with both CPA and CIA credentials are highly preferred.
Experience in the fintech, financial services, or travel industry.
Big Four public accounting experience.
Experience with AI systems or AI governance, ERP implementations, data analytics, or enterprise risk management.
Experience with NetSuite, Salesforce, FloQast, and/or AuditBoard/Optro.
Familiarity with data analytics tools and AI-enabled auditing techniques.

Responsibilities

Lead the planning, execution, and reporting of operational, financial, compliance, and integrated audits.
Assist with risk assessments and development of the annual audit plan.
Evaluate governance, risk management, compliance, and internal control processes.
Identify root causes of control deficiencies and operational inefficiencies, and develop practical recommendations to improve risk management and business performance.
Assist with the SOX compliance program, including planning, scoping, risk assessment, testing strategy, and reporting.
Coordinate and oversee work performed by co-sourced internal audit providers; manage engagements, budgets, timelines, deliverables, and coordination with internal stakeholders.
Review control testing workpapers and challenge conclusions where appropriate.
Partner with process owners to assess control design and operating effectiveness.
Monitor control-deficiency remediation and track progress through resolution.
Coordinate SOX-related activities among management, external auditors, and co-sourced resources; support the annual management assessment of internal controls over financial reporting.
Lead, mentor, and coordinate internal audit staff and co-sourced resources in audit and SOX testing activities.
Review workpapers and reports for quality, consistency, and adherence to audit methodology and documentation standards.
Identify opportunities to improve team effectiveness and the value of co-sourced arrangements.
Promote continuous improvement, including effective use of data analytics and AI-enabled audit techniques.
Partner with management on transformation initiatives, ERP implementations, automation efforts, and business process redesign, providing risk-focused advisory services without assuming management responsibility.
Help project teams proactively identify risks that could affect delivery of strategic objectives.
Build trusted relationships with senior leaders and present audit results and recommendations to executive leadership.
Support Audit Committee communications and reporting.
Partner with the enterprise risk management leader and support related initiatives.
Monitor emerging risks across operations, technology, cybersecurity, regulatory compliance, and global supply chains.