Technology Risk Audit Manager

Discord•San Francisco, CA

2d•Hybrid

About The Position

Discord's Internal Audit team is responsible for demonstrating effective risk management, process optimization, and adherence to relevant regulations through independent assurance and advisory work. This role focuses on the technical aspects, including IT SOX/ITGC, system controls, and consumer trust domains, to protect users. The position offers an opportunity to help build the internal audit function from the ground up with an AI-native approach. Initial focus will be on understanding Discord's financial-reporting systems, GRC program, and evaluating AI-powered testing solutions to establish a scalable function for enterprise readiness.

Requirements

Bachelor's degree in Information Systems, Computer Science, Accounting, or related field (or equivalent practical experience).
8+ years in IT audit, risk management, or controls, spanning both financial (SOX/ITGC) and consumer trust domains (security, privacy, or trust & safety a plus).
Deep ITGC fundamentals — access management, change management, computer operations, and SDLC controls.
SOX/ICFR knowledge and independent risk assessment methodology — able to scope an audit, identify key risks, and design test procedures rather than execute a checklist.
Framework fluency across COSO, COBIT, and NIST CSF, applied appropriately by context.
Proven external audit/co-source coordination experience, with a track record of driving remediation action plans through to closure.
Hands-on experience applying AI or automation tools to audit processes.
Strong communication skills translating technical risk for non-technical stakeholders.

Nice To Haves

Consumer facing platform technology risk experience.
Subscription and/or Ad Tech experience.
Experience auditing homegrown systems and/or tools.
AI governance experience.
Third-party/vendor risk depth.
Data privacy regulatory fluency.
DevSecOps / CI/CD pipeline controls.
CISA, CISSP, or CPA credential.

Responsibilities

Lead IT SOX/ITGC strategy and continuous improvement across financial-reporting-relevant systems.
Extend risk and controls assessment and assurance into consumer trust domains such as privacy, security, and trust & safety.
Partner with the Engineering organization to ensure proper access controls, segregation of duties, change management, and CI/CD integrity are in place.
Guide control design through system implementations, migrations, and platform changes.
Manage teams and projects related to IT controls and technical audits, including external contractors and/or internal teammates.
Apply AI/automation tools to improve audit testing efficiency, anomaly detection, and control monitoring.
Track remediation, coordinate with external auditors, and report to senior leadership.