Staff Technical Program Manager, IT Audit & Governance

MongoDB•Palo Alto, CA

20h•$151,000 - $297,000•Hybrid

About The Position

MongoDB is hiring a senior, hands-on leader to own IT audit and governance across its applications, infrastructure, cloud platforms, and supporting systems. The role is accountable for maintaining continuous audit readiness across SOX ITGCs and ITACs, as well as SOC, ISO, security, regulatory, and customer audit obligations. The position partners with leaders across Infrastructure, Engineering, Security, Cloud, Enterprise Applications, and Business Systems to ensure controls are owned, operated, evidenced, and remediated on time. It serves as the primary IT liaison to Internal Audit, Finance/SOX PMO, and external auditors, and requires independent execution and influence without direct authority. The role owns the IT audit and governance program, including the system and obligation inventory, audit calendar, governance standards, control frameworks, and governance cadence with IT leadership. It leads end-to-end SOX IT compliance, including scoping, control design and ownership, evidence, readiness testing, ITAC strategy, IPE/report validation, and segregation of duties across ERP and key financial applications. It also develops controls that fit into IT workflows, conducts readiness and self-assessment testing, rationalizes controls across frameworks, advances automation and continuous control monitoring, and reviews SOC reports and third-party control dependencies. The position owns the lifecycle of IT audit issues from identification and root cause through remediation, validation, and closure. It prepares management responses to findings, reports control health and remediation status to leadership, and coordinates auditor scope, walkthroughs, evidence requests, PBCs, and reliance strategy. It sets documentation and evidence standards, trains control owners, mentors analysts, guides co-source or outsourced resources, and contributes to emerging governance areas such as AI and emerging technology. The role follows a hybrid working model and is intended for candidates based in Palo Alto or New York City. MongoDB describes its culture as supportive and enriching, with a commitment to employee development and wellbeing. Eligible U.S.-based employees may receive the benefits listed in the posting.

Requirements

8–12+ years of experience in IT audit, SOX compliance, IT governance, or technology risk, in Big 4, internal audit, or in-house IT GRC.
Deep, hands-on experience with SOX 404 ITGCs and ITACs in a public company.
Working knowledge of COSO, COBIT, and PCAOB AS 2201, including external auditors’ approaches to IT reliance and ITAC testing.
Experience across modern technology environments, including cloud (AWS, Azure, or GCP), SaaS, ERP, infrastructure, and identity/access platforms.
Familiarity with SOC 1/SOC 2, ISO 27001, NIST, and harmonizing frameworks and audits.
Proven ability to own programs end-to-end and drive accountability and execution across multiple teams and senior leaders without direct authority.
Excellent communication and executive presence, including negotiating with auditors and briefing senior leadership.
Bachelor’s degree in Information Systems, Accounting, Computer Science, or a related field.
Candidates should be based in Palo Alto or New York City for the hybrid working model.

Nice To Haves

CISA, CISSP, CIA, CPA, or equivalent certification.
Experience with GRC and audit tools such as AuditBoard, ServiceNow GRC, Workiva, or Archer.
Data analytics skills such as SQL, Python, Power BI, or Tableau for full-population testing and control monitoring.
Experience in high-growth, SaaS, or technology company environments.
Familiarity with DevOps/CI-CD, infrastructure-as-code, and change management in agile environments.

Responsibilities

Own the audit and governance program across IT applications, infrastructure, cloud platforms, and supporting systems.
Maintain an inventory of systems, owners, and applicable audit and compliance obligations.
Build and run a coordinated IT audit calendar covering SOX, internal audit, external audit, and compliance activities.
Establish governance standards, policies, and control frameworks across IT.
Assign control and remediation ownership, deadlines, and escalation paths with cross-functional IT leaders.
Run governance forums and control health reviews; report status, risks, and overdue items to IT leadership.
Hold teams accountable for control execution, evidence quality, and issue closure, escalating when commitments slip.
Translate audit and compliance requirements into practical work for engineering and infrastructure teams.
Own the end-to-end SOX IT program, including scoping inputs, control design, ownership, evidence, readiness testing, and issue management.
Maintain the ITGC framework across in-scope applications, databases, operating systems, and cloud infrastructure.
Own ITAC strategy and coverage with Finance and business-system owners, including automated controls, configurations, interfaces, calculations, and approval workflows.
Own IPE/report validation, ITAC baselines, and segregation of duties across ERP and key financial applications.
Design controls that are integrated into IT workflows such as ticketing, CI/CD, IAM, and CMDB.
Run readiness and self-assessment testing before Internal Audit and external auditor testing.
Rationalize overlapping controls so a control and its evidence can address multiple requirements.
Drive automation and continuous control monitoring to reduce manual effort and audit burden.
Manage SOC 1/SOC 2 report reviews, CUECs, and third-party/vendor control dependencies.
Own the IT issue lifecycle from identification and root cause through remediation planning, validation, and closure.
Prepare management responses to audit findings and provide the IT perspective on deficiency severity with Finance, Legal, and Internal Audit.
Report control health and remediation status to IT leadership, the CAO, and the Audit Committee as needed.
Serve as the primary IT contact for Internal Audit and external auditors on scope, walkthroughs, evidence requests, and reliance strategy.
Coordinate PBC requests, evidence standards, and timelines across IT teams.
Train and enable control owners and IT leaders on audit requirements, evidence quality, and responsibilities.
Set standards for control documentation, evidence, and issue management across IT.
Mentor analysts and guide co-source or outsourced resources.
Contribute to emerging governance areas, including AI and emerging technology.