IT Audit Project Manager

We are seeking a highly motivated, hands-on IT Audit Project Manager to join our Internal Audit team in San Jose, CA. In this individual contributor role, you will report directly to the Director of Internal Audit and lead the planning, execution, and reporting of complex IT audit engagements and SOX compliance across our enterprise tech landscape.

You will evaluate the design and operating effectiveness of technology controls, IT infrastructure, cybersecurity posture, software development practices, and key enterprise SaaS applications.

The ideal candidate brings 5–7 years of progressive experience, ideally derived from a Big 4 public accounting firm or a large-scale technology environment. You will combine strong project management discipline with deep technical audit expertise to independently evaluate enterprise risks, drive SOX compliance, and serve as a trusted advisor across tech and business teams.

Key Responsibilities

1. End-to-End Audit Execution & Project Management

• Lead and execute risk-based IT audits, SOX IT General Controls (ITGC) assessments, application control reviews, and integrated operational audits from scoping through final reporting.
• Serve as the hands-on primary internal audit contact for assigned audit initiatives, defining scope, creating audit programs, establishing project timelines, and ensuring deliverables meet high quality standards on schedule.
• Perform risk assessments to evaluate technical vulnerabilities, access governance, change management, and configuration security across operating systems, databases, cloud ecosystems, and enterprise applications.
• Draft clear, concise, and impact driven audit findings and partner with control owners to track issue remediation progress and perform assessments to verify successful resolution.
• Assess emerging risk areas, including AI/Generative AI governance, automated pipelines, data privacy (GDPR, CCPA), and Third-Party Risk Management (TPRM).
• Partner with leadership to integrate IT risks into the broader Enterprise Risk Management (ERM) framework, aligning audit coverage with key enterprise risk profiles and mitigation goals.

2. Enterprise Application & Control Testing

• Evaluate, test, and validate ITGCs and automated application controls within business-critical platforms.
• Audit segregation of duties (SoD), user access management, interface security, and custom workflows within core financial and operational software environments.

Required Qualifications

• Experience: 5-7 years of hands-on experience in IT Audit, Technology Risk, Information Security, or IT Compliance.
• Background: Big 4 public accounting firm experience or experience within a large-scale Tech/SaaS company is strongly preferred.
• Education: Bachelor’s degree in Information Systems, Computer Science, Cybersecurity, Accounting, Business, or a related technical discipline.
• Certifications: Active professional certification strongly preferred
• Technical Frameworks & Compliance:
• Deep understanding of Sarbanes-Oxley (SOX) Section 404 ITGCs, ITACs (IT-Dependent Automated Controls), and SOC 1 / SOC 2 reports.
• Solid working knowledge of industry frameworks: COBIT, NIST Cybersecurity Framework, ISO 27001, and COSO.

Preferred Qualifications & Skills

• Enterprise Application Expertise: Hands-on audit or control testing experience across core enterprise SaaS platforms such as Salesforce, Workday, and NetSuite.
• Data & Analytics: Experience using data analysis tools to analyze large datasets and automate control testing.
• Self-Starter Mindset: Demonstrated ability to manage projects independently with minimal supervision, navigating complex technical environments to drive results.
• Communication: Exceptional narrative writing skills and executive presence to effectively communicate risk findings to engineering, IT, and executive leadership in San Jose.

Work Arrangement

Hybrid: This role operates in a hybrid capacity, blending the benefits of remote work with the advantages of in-person collaboration. In locations where our workplace policy applies (i.e. San Jose, Durham, Mexico City, Bangalore, Pune, Hoofddorp, Belgrade, Barcelona, Singapore, Sydney and Tokyo), employees are expected to work onsite a minimum of 3 days per week to foster collaboration, team alignment, and access to in-office resources. Workplace type may vary based on location and team requirements. Please speak with your recruiter for details. Additional team-specific guidance and norms will be provided by your manager.

The pay range for this position at commencement of employment is expected to be between USD $114,000 and USD $229,000 per year.

However, base pay offered may vary depending on multiple individualized factors, including market location, job-related knowledge, skills, and experience. The total compensation package for this position may also include other elements, including a sign-on bonus, restricted stock units, and discretionary awards in addition to a full range of medical, financial, and/or other benefits (including 401(k) eligibility and various paid time off benefits, such as vacation, sick time, and parental leave), dependent on the position offered. Details of participation in these benefit plans will be provided if an employee receives an offer of employment.

If hired, employee will be in an “at-will position” and the Company reserves the right to modify base salary (as well as any other discretionary payment or compensation program) at any time, including for reasons related to individual performance, Company or individual department/team performance, and market factors. Our application deadline is 40 days from the date of posting. In good faith, the posting may be removed prior to this date if the position is filled or extended in good faith.

--