Technology Auditor, Internal Audit

Salesforce•Indianapolis, IN

1d•Hybrid

About The Position

The Internal Audit Organization is an independent and objective function that assists Salesforce to meet its goals through independent reviews and assessments. Specifically, the Internal Audit Organization evaluates and provides recommendations to enhance the effectiveness, efficiency, and scalability of the company’s processes, information systems, and underlying internal control environment. The Internal Audit Organization also evaluates and assists in improving the effectiveness of the Company’s risk management and governance processes. This function reports administratively to the President and Chief Operating and Financial Officer (COFO) and directly to the Audit and Finance Committee of the Company’s Board of Directors. Internal Audit is modernizing the way we perform our audits, using technology, AI, and analytics to fuel the transformation. We are looking for an Internal Auditor to excel with an amazing team to support you. You will have the opportunity to support audit activities for the Company’s technology and product functions (e.g., Business Technology, Engineering, Product Management), with a growing focus on how AI and agentic capabilities are adopted, governed, and controlled across these functions.

Requirements

A minimum of 1-2 years experience in Internal Audit, Compliance, or Risk Assurance and the ability to demonstrate:
Understanding of and experience with the audit life cycle
Understanding of audit best practices in the form of planning, fieldwork, and reporting
Experience working with business owners and teams in an audit capacity
Comfort adopting and experimenting with new AI/GenAI tools in a controlled, responsible manner (“builder” / Customer-Zero mindset)
Strong understanding of operational and IT internal control methodologies and terminology (e.g., COSO, COBIT), including documentation and testing
Foundational understanding of AI governance and Responsible AI concepts — e.g., model risk, third-party AI/LLM supply chain, and AI security
Familiarity with AI risk and governance frameworks (e.g., NIST AI RMF, ISO/IEC 42001, EU AI Act) and knowledge of and ability to research and apply the guidance to a changing control environment
Familiarity with data protection and privacy concepts, including data residency and jurisdictional (cross-border) data controls
Highest level of ethics, independence, and professionalism
Strong analytical and data analysis skills
Ability to work in a high-growth, fast-paced environment, often on multiple projects simultaneously
Ability to work with minimal day-to-day supervision
Understanding of business processes related to technology companies
Excellent communication and interpersonal skills
Strong problem-solving capabilities
Intellectual curiosity
Experience with data analysis and visualization tools, such as Tableau (including Tableau Next), and modern data platforms
Experience auditing IT general controls
Exposure to auditing or using AI/ML systems, LLM-based applications, or agentic workflows
Comfortable working and supporting a fully global, multicultural, and distributed team
Knowledge about cloud computing, AI, or technology businesses and processes

Nice To Haves

CPA, CIA,CISA, or other relevant audit certifications, including AI-audit / AI-governance certifications (e.g., ISACA Advanced in AI Audit (AAIA) or equivalent)

Responsibilities

Support audits that assess risks and controls over AI and agentic capabilities embedded in business processes — including access and authorization, guardrail enforcement, data grounding, third-party AI/LLM dependencies, and Responsible AI considerations
Help evaluate how company and customer data is used by AI tools and connected platforms, including data minimization, masking, consent, logging, and monitoring
Be intellectually curious and passionate about internal audit, learning about new processes, systems, and technologies (including AI) and how to make them better, driven by “doing the right thing”, effectively maneuver through the organization, influence others, and keep up with a dynamic and fast-changing environment
Be a team-oriented individual who can effectively work at all levels within the organization, both within Audit and by collaborating with other 2nd line risk and compliance teams and 1st line business partners
Be a “self-starter” with the ability to manage project commitments independently, with minimal oversight
Assist Senior Auditors and Audit Managers / Senior Managers with planning and general team functions
Assist with planning, fieldwork, and reporting throughout the audit life cycle
Develop a strong understanding of Salesforce's business model, processes, systems, and underlying controls, and influence positive change in these areas
Be knowledgeable in project management best practices including project plans, charters, and task management
Individually and with the team, build relationships and work with process owners to understand and document their operations and the underlying internal control environment
Develop and execute audit testing procedures to evaluate the design and operating effectiveness of internal controls
Use AI and generative-AI tooling (e.g., agentic assistants and AI-enabled GRC/eGRC workflows) to accelerate audit planning, testing, and documentation, applying “human-at-the-helm” review of AI-generated output and adhering to the team's AI governance framework (data classification, data-exposure, and consumption considerations)
Seek opportunities to automate repetitive audit test procedures and improve testing efficiency through data analytics and AI
Prepare high-quality audit work papers documenting the test steps performed and the results and recommendations
Deliver assigned audit tasks and other project tasks within required deadlines and with minimal supervision, with a focus on delivering quality and adhering to global audit methodologies
Manage issue follow up and closure process for open Management Action plans, resulting from past audits
Stay abreast of best practices, both internally and externally, and provide a conduit for introducing those practices to the Company
Be a role model for the Company’s values and demonstrate the highest ethical standards