IT Audit Project Manager

• Experience: 5-7 years of hands-on experience in IT Audit, Technology Risk, Information Security, or IT Compliance.
• Background: Big 4 public accounting firm experience or experience within a large-scale Tech/SaaS company is strongly preferred.
• Education: Bachelor’s degree in Information Systems, Computer Science, Cybersecurity, Accounting, Business, or a related technical discipline.
• Certifications: Active professional certification strongly preferred
• Technical Frameworks & Compliance:
• Deep understanding of Sarbanes-Oxley (SOX) Section 404 ITGCs, ITACs (IT-Dependent Automated Controls), and SOC 1 / SOC 2 reports.
• Solid working knowledge of industry frameworks: COBIT, NIST Cybersecurity Framework, ISO 27001, and COSO.

• Enterprise Application Expertise: Hands-on audit or control testing experience across core enterprise SaaS platforms such as Salesforce, Workday, and NetSuite.
• Data & Analytics: Experience using data analysis tools to analyze large datasets and automate control testing.
• Self-Starter Mindset: Demonstrated ability to manage projects independently with minimal supervision, navigating complex technical environments to drive results.
• Communication: Exceptional narrative writing skills and executive presence to effectively communicate risk findings to engineering, IT, and executive leadership in San Jose.

• Accounting & Finance
• San Jose, United States
• 32767

• Lead and execute risk-based IT audits, SOX IT General Controls (ITGC) assessments, application control reviews, and integrated operational audits from scoping through final reporting.
• Serve as the hands-on primary internal audit contact for assigned audit initiatives, defining scope, creating audit programs, establishing project timelines, and ensuring deliverables meet high quality standards on schedule.
• Perform risk assessments to evaluate technical vulnerabilities, access governance, change management, and configuration security across operating systems, databases, cloud ecosystems, and enterprise applications.
• Draft clear, concise, and impact driven audit findings and partner with control owners to track issue remediation progress and perform assessments to verify successful resolution.
• Assess emerging risk areas, including AI/Generative AI governance, automated pipelines, data privacy (GDPR, CCPA), and Third-Party Risk Management (TPRM).
• Partner with leadership to integrate IT risks into the broader Enterprise Risk Management (ERM) framework, aligning audit coverage with key enterprise risk profiles and mitigation goals.

Hybrid: This role operates in a hybrid capacity, blending the benefits of remote work with the advantages of in-person collaboration. In locations where our workplace policy applies (i.e. San Jose, Durham, Mexico City, Bangalore, Pune, Hoofddorp, Belgrade, Barcelona, Singapore, Sydney and Tokyo), employees are expected to work onsite a minimum of 3 days per week to foster collaboration, team alignment, and access to in-office resources. Workplace type may vary based on location and team requirements. Please speak with your recruiter for details. Additional team-specific guidance and norms will be provided by your manager.

The pay range for this position at commencement of employment is expected to be between USD $114,000 and USD $229,000 per year.

However, base pay offered may vary depending on multiple individualized factors, including market location, job-related knowledge, skills, and experience. The total compensation package for this position may also include other elements, including a sign-on bonus, restricted stock units, and discretionary awards in addition to a full range of medical, financial, and/or other benefits (including 401(k) eligibility and various paid time off benefits, such as vacation, sick time, and parental leave), dependent on the position offered. Details of participation in these benefit plans will be provided if an employee receives an offer of employment.

If hired, employee will be in an “at-will position” and the Company reserves the right to modify base salary (as well as any other discretionary payment or compensation program) at any time, including for reasons related to individual performance, Company or individual department/team performance, and market factors. Our application deadline is 40 days from the date of posting. In good faith, the posting may be removed prior to this date if the position is filled or extended in good faith.

• Project or Program Management
• San Jose, United States

• Legal
• San Jose, United States

• Manufacturing & Operations
• San Jose, United States

After all those discussions its time for both you and our hiring teams to make some decisions. Your Talent Advisor will be your main point of contact during this period. Be sure to keep them informed of any outstanding questions or timing milestones that are important to you.

• Evaluate, test, and validate ITGCs and automated application controls within business-critical platforms.
• Audit segregation of duties (SoD), user access management, interface security, and custom workflows within core financial and operational software environments.

We value standout performers, ambitious team players, and long-term thinkers who know how to connect the dots to get results. If you're a little customer obsessed, you've found your tribe. Are you a game changer? Let us see that in your application.

Our talent advisors review every application we receive and we'll follow up with next steps and guidance at every phase. Overall you can expect 1-2 rounds of talks with our hiring leaders after your initial chat with your Talent Advisor.