Sr. Manager, IT Internal Audit

Avalara • UNAVAILABLE, UNAVAILABLE

7d • Remote

About The Position

As Senior Manager, IT Internal Audit, you will be a key member of Avalara's leadership team, reporting directly to the VP of Internal Audit. You will own the vision and execution of the IT internal audit plan, lead the IT ICFR/SOX program end-to-end, and oversee high-impact audits across IT, security, privacy, and compliance risks. This is a remote role open to candidates anywhere in the US. You will manage internal and co-source resources, help modernize the audit function, and support Avalara's approach to AI governance and responsible AI adoption.

The role partners with executive stakeholders across Security, Engineering, Compliance, Product, Risk Management, G&A, ERM, and other functions. It includes leading audit engagements, technology risk assessments, external auditor relationships, public-company readiness efforts, strategic initiatives, M&A due diligence, and special investigations. You will also build and develop a high-performing audit team and advance the use of AI and automation in audit processes.

The role requires a bachelor's degree in a related field, at least 7 years of progressive IT audit experience, at least 3 years of people leadership, and at least 5 years managing complex ICFR/SOX compliance programs. The compensation range is $153,300–$252,900. The role is eligible for an annual bonus and an equity award, subject to applicable plan terms. Avalara describes itself as an AI-first company and expects employees to use AI in their work and stay current with AI trends and practices.

Requirements

• Bachelor's degree in Information Systems, Engineering, Risk Management, or a related field.
• At least 7 years of progressive experience in IT audit, internal or external.
• At least 3 years in a people-leadership role within a high-growth SaaS, FinTech, or technology company.
• Deep expertise in internal auditing standards, ICFR/SOX compliance, GAAP, PCAOB standards, SEC regulations, COSO, and COBIT.
• Hands-on experience auditing cloud-native SaaS architectures, IT general controls, and cybersecurity frameworks such as NIST and ISO 27001.
• At least 5 years managing complex ICFR/SOX compliance programs.
• Exceptional project management and strategic planning skills, including managing competing priorities across a global audit portfolio and communicating risk to executive and board-level audiences.
• Ability to recruit, develop, and retain audit talent and build high-performing teams.
• Experience using AI and AI-related technologies and applying AI to business challenges.

Nice To Haves

• CPA, CIA, CISA, CISSP, CCSP, or CISM certification; multiple certifications or deep IT audit and information security credentials are strongly preferred.
• Experience establishing or transforming a SOX program during rapid growth or M&A integration.
• Experience with Salesforce, NetSuite, Workday, and modern audit/GRC platforms.
• Hands-on experience with data analytics, AI/ML-driven auditing techniques, and emerging AI governance frameworks.
• Familiarity with AI deployment and governance at large-scale SaaS companies and related risk and compliance implications.

Responsibilities

• Drive a risk-based IT audit strategy across financial, operational, IT, security, and compliance domains in partnership with executive stakeholders.
• Manage concurrent audit engagements end-to-end, including scoping, risk prioritization, fieldwork, reporting, and remediation tracking.
• Contribute to the enterprise risk assessment framework by identifying emerging technology, cybersecurity, AI/ML, and business risks and translating them into an audit roadmap.
• Advise the business on AI governance, algorithmic risk, and control implications of deploying AI across products and operations.
• Manage and transform the IT ICFR/SOX compliance program, including control design, testing methodology, regulatory readiness, and the use of AI and automation in the control environment.
• Coordinate with Business Process internal auditors to align SOX and control efforts.
• Manage relationships with IT external auditors and maintain alignment and communication to reduce audit fatigue for internal stakeholders.
• Lead annual technology risk assessments in partnership with the C-suite, ERM, Engineering, and Avatech.
• Deliver executive-ready audit reports with clear business impact, actionable recommendations, and risk quantification for senior leadership and the Board.
• Build and develop a high-performing audit team, including attracting talent, developing future leaders, and promoting continuous improvement and operational excellence.
• Deploy and advance audit technology such as AI-powered anomaly detection, predictive risk scoring, automated control testing, and continuous monitoring; build team AI fluency and repeatable evaluation frameworks for emerging tools.
• Partner with internal stakeholders and external audit to build controls infrastructure, governance frameworks, and audit capabilities for public-company readiness.
• Lead strategic initiatives, M&A due diligence, and special investigations.

Benefits

• Paid time off.
• Paid parental leave.
• Eligibility for bonuses for many employees; this role is eligible for an annual bonus based on individual and company performance, subject to applicable plan terms.
• Private medical, life, and disability insurance generally available, varying by location.
• Equity award eligibility, subject to applicable plan terms.
• Employee-run resource groups with senior leadership and executive sponsorship.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior