Internal Audit - Manager (Remote)
for each section heading. Use - for any list of duties/requirements/benefits. Use
for prose.
We need to preserve all substantive information, remove boilerplate (EEO, privacy policy, etc). Also remove duplicated lines, navigation, cookie, legal, scam-warning, application instructions. The posting includes "Learn more about how you can fulfil your potential at www.fico.com/Careers" and EEO statement etc. Remove those.
We need to include sections only when posting has real specific content. So we can have sections: About the role (maybe from "The Opportunity" paragraph), Responsibilities (What You’ll Contribute), Requirements (What We’re Seeking), Benefits (Our Offer to You includes benefits and culture), Pay (targeted base pay range), maybe Why Make a Move to FICO? could be part of About the role or separate section like "About FICO". But we can include a section "About FICO" if there is content. The posting includes "Why Make a Move to FICO?" with description. That's substantive. Could be a section "About FICO". But the instruction says use headings like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. It doesn't forbid other headings? It says use
for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). It implies we should use those headings when appropriate, but we can also use other headings? Probably better to stick to those. So we can map content to those headings.
- About the role: could include "The Opportunity" paragraph plus maybe "Why Make a Move to FICO?"? But that is more about company. Could still be About the role.
- Responsibilities: "What You’ll Contribute" bullet list (actually it's prose with many duties). We need to turn into - list items. We must preserve all substantive information; we can break each sentence into list items.
- Requirements: "What We’reSeeking" includes education, experience, technical skills, certifications. We'll list as
- .
- Benefits: "Our Offer to You" includes culture, impact, compensation, benefits, work/life balance, etc. We'll list as
- .
- Pay: targeted base pay range $80,500 to $126,500. We'll put in
.
- Schedule: not present, so omit.
We also need to include maybe "Qualifications" or "Skills" sections if we want to split requirements. But we can combine into Requirements. The instruction says prefer a few substantive sections over many thin ones. So we can have About the role, Responsibilities, Requirements, Benefits, Pay. That's five sections.
We must not include filler like "commensurate with experience". Not present.
We need to remove boilerplate: EEO statement, privacy policy link, "Learn more about how you can fulfil your potential at www.fico.com/Careers", also maybe "FICO promotes a culture of inclusion..." etc. That's EEO boilerplate; remove.
Also remove "FICO (NYSE: FICO) is a leading global analytics software company..." maybe that's part of About the role? It's generic but could be kept as part of About the role? It's not specific to role but still substantive about company. Might keep as part of About the role. However it's somewhat generic but still info. We'll keep it.
Now craft HTML.
Structure:
About the role
FICO (NYSE: FICO) is a leading global analytics software company, helping businesses in 100+ countries make better decisions. Join our world-class team today and fulfill your career potential! The Opportunity Join our top-notch risk and assurance team within a global, fast-growing and progressive data analytics and cutting-edge AI oriented software company. If you’re eager to feel empowered and apply your creativity and experience in a way that adds value and serves to mitigate business risks across the enterprise, this is the opportunity for you. This is a hands-on lead role. You will own the IT audit coverage for a defined portfolio of FICO’s financial applications, cloud platforms and security tooling — running engagements end to end, setting the testing approach, and raising the bar on how we use data, automation and AI to get assurance.
But we might split into two paragraphs? It's okay.
Then Responsibilities:
Responsibilities
- Lead IT audit engagements end to end with limited supervision — scoping and risk assessment, walkthroughs, design and operating effectiveness testing, issue development, and remediation validation.
- Own the Sarbanes-Oxley Section 404 (SOX 404) IT general controls program for an assigned portfolio of in-scope financial applications and supporting infrastructure, spanning access to programs and data, change management, program development, and IT operations.
- Test IT application controls, key reports, interfaces and system-generated data supporting financial reporting across our ERP and other in-scope financial applications.
- Perform annual and ad-hoc segregation of duties (SoD) analysis. This is data-driven work: extracting role and entitlement data from source systems, normalizing and deduplicating it, applying and maintaining a conflict ruleset, identifying conflicting access combinations and privileged access exceptions, and working with process owners to validate, justify or remediate what surfaces. A standing goal for this role is to automate the extraction, normalization and comparison steps so the analysis becomes a repeatable, monitorable process rather than a once-a-year manual exercise.
- Audit identity and access management across the enterprise — directory services, enterprise single sign-on, identity governance and access certification platforms, and privileged access and secrets management tooling (password vaults and safes) — covering joiner/mover/leaver provisioning, privileged access, and periodic user access reviews.
- Evaluate change and release management controls across modern DevOps toolchains — Git-based source control, CI/CD pipelines, and IT service management platforms such as Jira and ServiceNow — including automated approvals and separation of duties between development and production.
- Assess controls over cloud infrastructure and enterprise data platforms, covering configuration, encryption, logging and monitoring, and data pipeline integrity.
- Perform cybersecurity and cloud security assessments across FICO’s SaaS product environments that hold sensitive client data.
- Support third-party risk and service organization report reviews — evaluating SOC 1 and SOC 2 reports, transcribing and mapping complementary user entity controls (CUECs) to FICO controls, and assessing subservice organization coverage and bridge letters.
- Contribute to emerging-risk coverage as FICO’s use of AI expands, including AI and model governance controls evaluated against frameworks such as the NIST AI Risk Management Framework and ISO/IEC 42001.
- Apply data analytics and AI-assisted tooling to audit work — scripted population extraction, full-population testing where practical, and automated continuous monitoring — rather than defaulting to manual sampling.
- Prepare clear, well-supported work papers; summarize findings and review them with the Chief Audit Executive and/or the Senior Manager, IT Risk & Assurance.
- Act as the liaison between our external auditors and internal stakeholders across a wide variety of topics and projects. This means coordinating IT scoping and walkthroughs, owning evidence and PBC requests end to end, supporting reliance discussions on internal audit work, translating external auditor expectations into practical asks for system and process owners, and tracking open items through to closure so neither side is left waiting.
- Partner with IT, Engineering, Security, Finance and business process owners so that population and sample requests are identified, communicated and retrieved efficiently.
- Drive improvement of FICO’s internal control structure through practical control design and process enhancement recommendations.
- Coach and review the work of junior auditors and co-sourced resources, and help maintain testing standards, templates and documentation quality across the team.
- Proactively keep leadership informed of progress, control weaknesses and audit findings; meet established deadlines while maintaining confidentiality when dealing with sensitive information and situations.
Then Requirements:
Requirements
- Bachelor’s degree in information technology, information systems, computer science, accounting or a related field; equivalent practical experience will be considered.
- Approximately 3–5 years of progressive IT audit experience — public accounting, a national firm, or corporate internal audit at a technology, SaaS or financial services company. At least 3 years is recommended, including meaningful exposure to owning or leading ITGC and SOX 404 testing rather than executing someone else’s test steps.
- Hands-on experience testing IT general and application controls over a major ERP — Oracle strongly preferred, SAP, NetSuite or comparable also valued — and over cloud-hosted business applications such as HCM, CRM, revenue and data warehouse platforms.
- Real enthusiasm for using AI and automation to change how audit work gets done. Our team uses Claude daily and is actively building AI-assisted workflows: drafting and rolling forward testing narratives, mapping SOC report CUECs to our control set, cleaning and normalizing large access extracts, sizing and documenting samples, summarizing evidence, and replacing recurring manual procedures with scripts and continuous monitoring. You do not need to arrive an expert — but you should be the kind of auditor whose first instinct is to ask whether a task can be automated or monitored rather than repeated by hand every year.
- Working knowledge of identity governance and privileged access concepts — directory services, single sign-on, access certification, and privileged credential management — and the ability to evaluate access evidence critically rather than accept a system-generated report at face value.
- Cloud audit experience in AWS (Azure or GCP also relevant), covering IAM, logging, network segmentation, key management and configuration baselines.
- Familiarity with the control frameworks and regulatory standards we operate against: COSO 2013, COBIT, NIST CSF and SP 800-53, ISO/IEC 27001, SOC 1 and SOC 2, PCI DSS, GDPR, HIPAA and US state privacy law including the CCPA/CPRA.
- Data and scripting ability. Advanced Excel, including Power Query, is expected. Beyond that we are deliberately looking to add technical depth to the team — SQL and Python are the most immediately useful, and PowerShell, VBA, Power BI or Tableau, shell scripting, regular expressions, and working with REST APIs are all genuinely valuable here. Real depth in two or three of these counts for far more than passing familiarity with all of them.
- CISA achieved or actively being pursued. CISSP, CIA, CRISC, CPA, ISO/IEC 27001 Lead Auditor or an AWS certification are a plus.
- Experience with GRC and audit management platforms (AuditBoard, ServiceNow IRM, Workiva or similar) preferred.
- Pro-active and independent thinking in analyzing and developing solutions to complex problems.
- Strong written and verbal communication — able to explain a technical control failure to a non-technical finance or business audience and hold the line on a finding constructively.
- Comfortable working across global teams and time zones in a fast-moving public company environment.
Then Benefits:
Benefits
for prose. We need to preserve all substantive information, remove boilerplate (EEO, privacy policy, etc). Also remove duplicated lines, navigation, cookie, legal, scam-warning, application instructions. The posting includes "Learn more about how you can fulfil your potential at www.fico.com/Careers" and EEO statement etc. Remove those. We need to include sections only when posting has real specific content. So we can have sections: About the role (maybe from "The Opportunity" paragraph), Responsibilities (What You’ll Contribute), Requirements (What We’re Seeking), Benefits (Our Offer to You includes benefits and culture), Pay (targeted base pay range), maybe Why Make a Move to FICO? could be part of About the role or separate section like "About FICO". But we can include a section "About FICO" if there is content. The posting includes "Why Make a Move to FICO?" with description. That's substantive. Could be a section "About FICO". But the instruction says use headings like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. It doesn't forbid other headings? It says use
for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). It implies we should use those headings when appropriate, but we can also use other headings? Probably better to stick to those. So we can map content to those headings.
- About the role: could include "The Opportunity" paragraph plus maybe "Why Make a Move to FICO?"? But that is more about company. Could still be About the role.
- Responsibilities: "What You’ll Contribute" bullet list (actually it's prose with many duties). We need to turn into - list items. We must preserve all substantive information; we can break each sentence into list items.
- Requirements: "What We’reSeeking" includes education, experience, technical skills, certifications. We'll list as
- .
- Benefits: "Our Offer to You" includes culture, impact, compensation, benefits, work/life balance, etc. We'll list as
- .
- Pay: targeted base pay range $80,500 to $126,500. We'll put in
.
- Schedule: not present, so omit.
We also need to include maybe "Qualifications" or "Skills" sections if we want to split requirements. But we can combine into Requirements. The instruction says prefer a few substantive sections over many thin ones. So we can have About the role, Responsibilities, Requirements, Benefits, Pay. That's five sections.
We must not include filler like "commensurate with experience". Not present.
We need to remove boilerplate: EEO statement, privacy policy link, "Learn more about how you can fulfil your potential at www.fico.com/Careers", also maybe "FICO promotes a culture of inclusion..." etc. That's EEO boilerplate; remove.
Also remove "FICO (NYSE: FICO) is a leading global analytics software company..." maybe that's part of About the role? It's generic but could be kept as part of About the role? It's not specific to role but still substantive about company. Might keep as part of About the role. However it's somewhat generic but still info. We'll keep it.
Now craft HTML.
Structure:
About the role
FICO (NYSE: FICO) is a leading global analytics software company, helping businesses in 100+ countries make better decisions. Join our world-class team today and fulfill your career potential! The Opportunity Join our top-notch risk and assurance team within a global, fast-growing and progressive data analytics and cutting-edge AI oriented software company. If you’re eager to feel empowered and apply your creativity and experience in a way that adds value and serves to mitigate business risks across the enterprise, this is the opportunity for you. This is a hands-on lead role. You will own the IT audit coverage for a defined portfolio of FICO’s financial applications, cloud platforms and security tooling — running engagements end to end, setting the testing approach, and raising the bar on how we use data, automation and AI to get assurance.
But we might split into two paragraphs? It's okay.
Then Responsibilities:
Responsibilities
- Lead IT audit engagements end to end with limited supervision — scoping and risk assessment, walkthroughs, design and operating effectiveness testing, issue development, and remediation validation.
- Own the Sarbanes-Oxley Section 404 (SOX 404) IT general controls program for an assigned portfolio of in-scope financial applications and supporting infrastructure, spanning access to programs and data, change management, program development, and IT operations.
- Test IT application controls, key reports, interfaces and system-generated data supporting financial reporting across our ERP and other in-scope financial applications.
- Perform annual and ad-hoc segregation of duties (SoD) analysis. This is data-driven work: extracting role and entitlement data from source systems, normalizing and deduplicating it, applying and maintaining a conflict ruleset, identifying conflicting access combinations and privileged access exceptions, and working with process owners to validate, justify or remediate what surfaces. A standing goal for this role is to automate the extraction, normalization and comparison steps so the analysis becomes a repeatable, monitorable process rather than a once-a-year manual exercise.
- Audit identity and access management across the enterprise — directory services, enterprise single sign-on, identity governance and access certification platforms, and privileged access and secrets management tooling (password vaults and safes) — covering joiner/mover/leaver provisioning, privileged access, and periodic user access reviews.
- Evaluate change and release management controls across modern DevOps toolchains — Git-based source control, CI/CD pipelines, and IT service management platforms such as Jira and ServiceNow — including automated approvals and separation of duties between development and production.
- Assess controls over cloud infrastructure and enterprise data platforms, covering configuration, encryption, logging and monitoring, and data pipeline integrity.
- Perform cybersecurity and cloud security assessments across FICO’s SaaS product environments that hold sensitive client data.
- Support third-party risk and service organization report reviews — evaluating SOC 1 and SOC 2 reports, transcribing and mapping complementary user entity controls (CUECs) to FICO controls, and assessing subservice organization coverage and bridge letters.
- Contribute to emerging-risk coverage as FICO’s use of AI expands, including AI and model governance controls evaluated against frameworks such as the NIST AI Risk Management Framework and ISO/IEC 42001.
- Apply data analytics and AI-assisted tooling to audit work — scripted population extraction, full-population testing where practical, and automated continuous monitoring — rather than defaulting to manual sampling.
- Prepare clear, well-supported work papers; summarize findings and review them with the Chief Audit Executive and/or the Senior Manager, IT Risk & Assurance.
- Act as the liaison between our external auditors and internal stakeholders across a wide variety of topics and projects. This means coordinating IT scoping and walkthroughs, owning evidence and PBC requests end to end, supporting reliance discussions on internal audit work, translating external auditor expectations into practical asks for system and process owners, and tracking open items through to closure so neither side is left waiting.
- Partner with IT, Engineering, Security, Finance and business process owners so that population and sample requests are identified, communicated and retrieved efficiently.
- Drive improvement of FICO’s internal control structure through practical control design and process enhancement recommendations.
- Coach and review the work of junior auditors and co-sourced resources, and help maintain testing standards, templates and documentation quality across the team.
- Proactively keep leadership informed of progress, control weaknesses and audit findings; meet established deadlines while maintaining confidentiality when dealing with sensitive information and situations.
Then Requirements:
Requirements
- Bachelor’s degree in information technology, information systems, computer science, accounting or a related field; equivalent practical experience will be considered.
- Approximately 3–5 years of progressive IT audit experience — public accounting, a national firm, or corporate internal audit at a technology, SaaS or financial services company. At least 3 years is recommended, including meaningful exposure to owning or leading ITGC and SOX 404 testing rather than executing someone else’s test steps.
- Hands-on experience testing IT general and application controls over a major ERP — Oracle strongly preferred, SAP, NetSuite or comparable also valued — and over cloud-hosted business applications such as HCM, CRM, revenue and data warehouse platforms.
- Real enthusiasm for using AI and automation to change how audit work gets done. Our team uses Claude daily and is actively building AI-assisted workflows: drafting and rolling forward testing narratives, mapping SOC report CUECs to our control set, cleaning and normalizing large access extracts, sizing and documenting samples, summarizing evidence, and replacing recurring manual procedures with scripts and continuous monitoring. You do not need to arrive an expert — but you should be the kind of auditor whose first instinct is to ask whether a task can be automated or monitored rather than repeated by hand every year.
- Working knowledge of identity governance and privileged access concepts — directory services, single sign-on, access certification, and privileged credential management — and the ability to evaluate access evidence critically rather than accept a system-generated report at face value.
- Cloud audit experience in AWS (Azure or GCP also relevant), covering IAM, logging, network segmentation, key management and configuration baselines.
- Familiarity with the control frameworks and regulatory standards we operate against: COSO 2013, COBIT, NIST CSF and SP 800-53, ISO/IEC 27001, SOC 1 and SOC 2, PCI DSS, GDPR, HIPAA and US state privacy law including the CCPA/CPRA.
- Data and scripting ability. Advanced Excel, including Power Query, is expected. Beyond that we are deliberately looking to add technical depth to the team — SQL and Python are the most immediately useful, and PowerShell, VBA, Power BI or Tableau, shell scripting, regular expressions, and working with REST APIs are all genuinely valuable here. Real depth in two or three of these counts for far more than passing familiarity with all of them.
- CISA achieved or actively being pursued. CISSP, CIA, CRISC, CPA, ISO/IEC 27001 Lead Auditor or an AWS certification are a plus.
- Experience with GRC and audit management platforms (AuditBoard, ServiceNow IRM, Workiva or similar) preferred.
- Pro-active and independent thinking in analyzing and developing solutions to complex problems.
- Strong written and verbal communication — able to explain a technical control failure to a non-technical finance or business audience and hold the line on a finding constructively.
- Comfortable working across global teams and time zones in a fast-moving public company environment.
Then Benefits:
Benefits
- .
- Benefits: "Our Offer to You" includes culture, impact, compensation, benefits, work/life balance, etc. We'll list as
- .
- Pay: targeted base pay range $80,500 to $126,500. We'll put in
. - Schedule: not present, so omit. We also need to include maybe "Qualifications" or "Skills" sections if we want to split requirements. But we can combine into Requirements. The instruction says prefer a few substantive sections over many thin ones. So we can have About the role, Responsibilities, Requirements, Benefits, Pay. That's five sections. We must not include filler like "commensurate with experience". Not present. We need to remove boilerplate: EEO statement, privacy policy link, "Learn more about how you can fulfil your potential at www.fico.com/Careers", also maybe "FICO promotes a culture of inclusion..." etc. That's EEO boilerplate; remove. Also remove "FICO (NYSE: FICO) is a leading global analytics software company..." maybe that's part of About the role? It's generic but could be kept as part of About the role? It's not specific to role but still substantive about company. Might keep as part of About the role. However it's somewhat generic but still info. We'll keep it. Now craft HTML. Structure:
About the role
FICO (NYSE: FICO) is a leading global analytics software company, helping businesses in 100+ countries make better decisions. Join our world-class team today and fulfill your career potential! The Opportunity Join our top-notch risk and assurance team within a global, fast-growing and progressive data analytics and cutting-edge AI oriented software company. If you’re eager to feel empowered and apply your creativity and experience in a way that adds value and serves to mitigate business risks across the enterprise, this is the opportunity for you. This is a hands-on lead role. You will own the IT audit coverage for a defined portfolio of FICO’s financial applications, cloud platforms and security tooling — running engagements end to end, setting the testing approach, and raising the bar on how we use data, automation and AI to get assurance.
But we might split into two paragraphs? It's okay. Then Responsibilities:Responsibilities
- Lead IT audit engagements end to end with limited supervision — scoping and risk assessment, walkthroughs, design and operating effectiveness testing, issue development, and remediation validation.
- Own the Sarbanes-Oxley Section 404 (SOX 404) IT general controls program for an assigned portfolio of in-scope financial applications and supporting infrastructure, spanning access to programs and data, change management, program development, and IT operations.
- Test IT application controls, key reports, interfaces and system-generated data supporting financial reporting across our ERP and other in-scope financial applications.
- Perform annual and ad-hoc segregation of duties (SoD) analysis. This is data-driven work: extracting role and entitlement data from source systems, normalizing and deduplicating it, applying and maintaining a conflict ruleset, identifying conflicting access combinations and privileged access exceptions, and working with process owners to validate, justify or remediate what surfaces. A standing goal for this role is to automate the extraction, normalization and comparison steps so the analysis becomes a repeatable, monitorable process rather than a once-a-year manual exercise.
- Audit identity and access management across the enterprise — directory services, enterprise single sign-on, identity governance and access certification platforms, and privileged access and secrets management tooling (password vaults and safes) — covering joiner/mover/leaver provisioning, privileged access, and periodic user access reviews.
- Evaluate change and release management controls across modern DevOps toolchains — Git-based source control, CI/CD pipelines, and IT service management platforms such as Jira and ServiceNow — including automated approvals and separation of duties between development and production.
- Assess controls over cloud infrastructure and enterprise data platforms, covering configuration, encryption, logging and monitoring, and data pipeline integrity.
- Perform cybersecurity and cloud security assessments across FICO’s SaaS product environments that hold sensitive client data.
- Support third-party risk and service organization report reviews — evaluating SOC 1 and SOC 2 reports, transcribing and mapping complementary user entity controls (CUECs) to FICO controls, and assessing subservice organization coverage and bridge letters.
- Contribute to emerging-risk coverage as FICO’s use of AI expands, including AI and model governance controls evaluated against frameworks such as the NIST AI Risk Management Framework and ISO/IEC 42001.
- Apply data analytics and AI-assisted tooling to audit work — scripted population extraction, full-population testing where practical, and automated continuous monitoring — rather than defaulting to manual sampling.
- Prepare clear, well-supported work papers; summarize findings and review them with the Chief Audit Executive and/or the Senior Manager, IT Risk & Assurance.
- Act as the liaison between our external auditors and internal stakeholders across a wide variety of topics and projects. This means coordinating IT scoping and walkthroughs, owning evidence and PBC requests end to end, supporting reliance discussions on internal audit work, translating external auditor expectations into practical asks for system and process owners, and tracking open items through to closure so neither side is left waiting.
- Partner with IT, Engineering, Security, Finance and business process owners so that population and sample requests are identified, communicated and retrieved efficiently.
- Drive improvement of FICO’s internal control structure through practical control design and process enhancement recommendations.
- Coach and review the work of junior auditors and co-sourced resources, and help maintain testing standards, templates and documentation quality across the team.
- Proactively keep leadership informed of progress, control weaknesses and audit findings; meet established deadlines while maintaining confidentiality when dealing with sensitive information and situations.
Requirements
- Bachelor’s degree in information technology, information systems, computer science, accounting or a related field; equivalent practical experience will be considered.
- Approximately 3–5 years of progressive IT audit experience — public accounting, a national firm, or corporate internal audit at a technology, SaaS or financial services company. At least 3 years is recommended, including meaningful exposure to owning or leading ITGC and SOX 404 testing rather than executing someone else’s test steps.
- Hands-on experience testing IT general and application controls over a major ERP — Oracle strongly preferred, SAP, NetSuite or comparable also valued — and over cloud-hosted business applications such as HCM, CRM, revenue and data warehouse platforms.
- Real enthusiasm for using AI and automation to change how audit work gets done. Our team uses Claude daily and is actively building AI-assisted workflows: drafting and rolling forward testing narratives, mapping SOC report CUECs to our control set, cleaning and normalizing large access extracts, sizing and documenting samples, summarizing evidence, and replacing recurring manual procedures with scripts and continuous monitoring. You do not need to arrive an expert — but you should be the kind of auditor whose first instinct is to ask whether a task can be automated or monitored rather than repeated by hand every year.
- Working knowledge of identity governance and privileged access concepts — directory services, single sign-on, access certification, and privileged credential management — and the ability to evaluate access evidence critically rather than accept a system-generated report at face value.
- Cloud audit experience in AWS (Azure or GCP also relevant), covering IAM, logging, network segmentation, key management and configuration baselines.
- Familiarity with the control frameworks and regulatory standards we operate against: COSO 2013, COBIT, NIST CSF and SP 800-53, ISO/IEC 27001, SOC 1 and SOC 2, PCI DSS, GDPR, HIPAA and US state privacy law including the CCPA/CPRA.
- Data and scripting ability. Advanced Excel, including Power Query, is expected. Beyond that we are deliberately looking to add technical depth to the team — SQL and Python are the most immediately useful, and PowerShell, VBA, Power BI or Tableau, shell scripting, regular expressions, and working with REST APIs are all genuinely valuable here. Real depth in two or three of these counts for far more than passing familiarity with all of them.
- CISA achieved or actively being pursued. CISSP, CIA, CRISC, CPA, ISO/IEC 27001 Lead Auditor or an AWS certification are a plus.
- Experience with GRC and audit management platforms (AuditBoard, ServiceNow IRM, Workiva or similar) preferred.
- Pro-active and independent thinking in analyzing and developing solutions to complex problems.
- Strong written and verbal communication — able to explain a technical control failure to a non-technical finance or business audience and hold the line on a finding constructively.
- Comfortable working across global teams and time zones in a fast-moving public company environment.
Benefits
- .
- Pay: targeted base pay range $80,500 to $126,500. We'll put in