Senior Manager, Internal Controls

Qualia•Austin, TX

7d•$165,000 - $195,000•Hybrid

About The Position

Qualia's platform sits at the center of the money movement and recordkeeping that closes a real estate transaction. Our customers, their regulators, underwriters, and auditors need durable assurance that the controls behind that platform work. Building and running that assurance function is the job. As Senior Manager, Internal Controls, you will own Qualia’s SOC 1 program end to end, from readiness through a recurring examination, and run the internal audit and control testing that supports our SOC 2 program. Today much of our SOC readiness work is supported by outside consultants; a core goal of this role is to bring that capability in-house and become the internal owner of it. Over time, the mandate expands: as Qualia scales, this role grows into the foundation of a broader internal audit function covering financial, operational, and compliance risk across the company. This is a high-visibility individual contributor role reporting to the VP of Finance, with regular exposure to the executive team, external auditors, and customer teams.

Requirements

6+ years in internal audit, external audit, SOC reporting, or IT/financial controls, with a demonstrated track record of increasing scope and ownership over time; public accounting or advisory background welcome
Direct, hands-on SOC 1 experience. You have built or audited a SOC 1 program, and you know the difference between a control that reads well and a control that survives testing
Working knowledge of SOC 2 and the Trust Services Criteria, and comfort testing controls that live in engineering and infrastructure environments, not just in the GL
Strong command of internal control frameworks (COSO, ICFR concepts) and risk-based audit planning; able to scope an audit from a blank page rather than inheriting a program
Comfortable in ambiguity and building from zero. This is a first-of-its-kind role at Qualia, and you will define much of the mandate as you execute it
Excellent written communication. Your narratives, workpapers, and findings need to hold up in front of an external auditor and read clearly to an executive
Intellectual honesty and independence: you can deliver an unwelcome finding to a senior leader and keep the relationship intact
AI-forward: Actively uses AI tools (e.g., Claude, Gemini) to accelerate documentation, testing, and evidence workflows; both experimenting, and ultimately operationalizing

Nice To Haves

CPA, CIA, or CISA preferred
Experience in financial services, fintech, payments, or a regulated industry is a plus

Responsibilities

Own the SOC 1 program end to end: Drive Qualia’s SOC 1 readiness and examination lifecycle including control design, process narratives, risk and control matrices, evidence collection, gap remediation, and management of the external audit across our suite of products.
Run internal audit for SOC 2: Plan and execute internal control testing supporting Qualia’s SOC 2 program; assess control operating effectiveness, document findings, and partner with Security, Engineering, and Operations owners to close gaps before the external auditor finds them
Bring the capability in-house: Absorb and internalize work currently performed by outside consultants; build the documentation, testing cadence, and institutional knowledge that let Qualia run these programs without ongoing external dependency
Build the internal audit function: Establish a risk assessment framework and a forward audit plan that extends beyond SOC into financial, operational, and compliance reviews; set the standard for how audit work is scoped, tested, documented, and reported at Qualia
Be a credible partner, not a checkpoint: Work directly with process owners across Finance, Accounting, Security, Engineering, and Operations to design controls that actually fit how the business runs; earn the trust that makes remediation happen
Report clearly to leadership: Translate control status, findings, and residual risk into crisp, honest reporting for executive and Board-level audiences and for customer diligence
Automate the audit function: Build AI-powered and system-driven workflows for evidence collection, control testing, and issue tracking that reduce manual effort and make continuous monitoring realistic rather than aspirational