Jobs · Information Technology · California

Senior Internal IT Auditor

Klaviyo · San Francisco, CA · 1 wk ago
Information Technology$100k–$150k/yrFull-time
The user wants me to convert this job posting into clean semantic HTML following specific rules. Let me analyze the content and structure it appropriately. First, I need to identify the sections: 1. About the Team and Role (introductory prose) 2. How You'll Make a Difference (responsibilities - list) 3. Who You Are (requirements/qualifications - list) 4. Education and Experience (specific requirements) 5. Physical Requirements (list) 6. Massachusetts Applicants (legal note - but this might be boilerplate) 7. Pay Range (salary info) 8. Travel requirements 9. Get to Know Klaviyo (company description - might be boilerplate) 10. AI fluency, accommodations, privacy notice, EEO, scam warning - all boilerplate to remove According to rules: - Use

for section headings - Use
  • for lists - Use

    for prose - Don't repeat job title as heading - Don't put Job ID/requisition numbers as headings - Remove boilerplate (cookie/navigation/legal/EEO/equal-opportunity/scam-warning, duplicated lines, application instructions) - Include section ONLY when real specific content exists - Never emit heading followed by filler/placeholder text - Never create Pay/Schedule/Benefits sections unless posting actually states them - Output ONLY HTML fragment Let me structure: 1. About the Team and Role - this is prose, so

    under

    2. How You'll Make a Difference - this is a list of duties, so
    • 3. Who You Are - list of requirements,
      • 4. Education and Experience - list,
        • 5. Physical Requirements - list,
          • 6. Pay Range - the posting has specific base pay range: $100,000—$150,000 USD, so include Pay section 7. Travel - mentions up to 10% travel, could be part of Schedule or separate. The rules mention Schedule as a possible heading. But the posting says "This role may require up to 10% travel..." - could be under Schedule or just a note. I'll include a Schedule section with travel info. Massachusetts Applicants is a legal notice specific to MA law - might be considered boilerplate but it's specific to the posting. However, the rules say remove legal/EEO/equal-opportunity boilerplate. This is a state-specific legal requirement notice. I'll include it as a short

            maybe under a heading? But the rules say don't create sections for filler. It's a specific legal notice. I'll include it as a

            without heading or maybe under a "Legal Notices" heading? But the rules say only include sections with real specific content. I think I'll include it as a

            at the end. Get to Know Klaviyo is company marketing - boilerplate, remove. AI fluency, accommodations, privacy notice, EEO, scam warning - all boilerplate, remove. Now, the "Supervisory Responsibilities None." - that's a small note, could be a

            under About the Team and Role or separate. I'll include it as a

            in the About section. Let me write the HTML. Sections: - About the Team and Role - How You'll Make a Difference - Who You Are - Education and Experience - Physical Requirements - Pay - Schedule (for travel) - Massachusetts Applicants (maybe as a note) But the rules say "Prefer a few substantive sections over many thin ones." So maybe combine Physical Requirements and Schedule? Or keep separate. I'll create:

            About the Team and Role

            ...prose...

            Supervisory Responsibilities: None.

            How You'll Make a Difference

            • ... each bullet ...

            Who You Are

            • ... each bullet ...

            Education and Experience

            • ... each bullet ...

            Physical Requirements

            • ... each bullet ...

            Pay

            Base Pay Range for US Locations: $100,000—$150,000 USD. The base salary offered is determined by several factors, including the applicant’s job-related skills, relevant experience, education or training, and work location. In addition to base salary, the total compensation package may include participation in the company’s annual cash bonus plan, variable compensation (OTE) for sales and customer success roles, equity, sign-on payments, and a comprehensive range of health, welfare, and wellbeing benefits based on eligibility.

            Schedule

            This role may require up to 10% travel for purposes such as new hire onboarding, client or partner work, team meetings, and industry events. Travel is coordinated in advance.

            Massachusetts Applicants

            It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

            Now, I need to ensure I preserve ALL substantive information. The lists are long; I must include each bullet point as a separate
          • . I'll copy them exactly from the posting. Let me extract the bullets: How You'll Make a Difference: - Be a part of the Internal Audit team collaborating with the company to strengthen the internal control environment and continuously improve our SOX program - Advise system control owners on the design of internal controls, while maintaining IA’s independence from implementing or operating controls, and maintain the ITGC risk and control matrix within Optro, our SOX project management system - Perform end to end system walkthroughs to identify System Development Life Cycle Controls (SDLC), address risks and evaluate the related ITGC controls across homegrown applications (including code deployment and production access) and third-party SaaS - Prepare audit documentation request list, coordinate with controls owners and track request status - Perform periodic testing to assess the design and operating effectiveness of controls; including the buildout of test plans and audit workpapers in Optro - Assess and track audit findings / gaps including control weaknesses, root cause, and severity. Coordinate remediation of deficiencies with control owners via Optro - Where needed, prepare ITGC control training materials to help educate those responsible for performing control activities - As needed, review IT related policies and/or provide recommendations to policy owners - Provide guidance and support to internal stakeholders as they address control deficiencies or make significant process changes - Develop and maintain positive working relationships with process owners and stakeholders in various departments effectively, to increase awareness of the importance of risk and controls, and the role of Internal Audit - Coordinate with co-sourced third party providers, external auditors, internal business partners to ensure engagement, alignment and timely execution of audit work and the SOX program. - Develop and communicate status reporting for ITGC related projects and internal audits - Perform IT Application Control testing over in-scope systems, including system interfaces and integrations - Review SOC 1 reports, complementary user entity controls, and bridge letters for in-scope vendors - Prepare key report testing over key reports used in the operation of key controls, including information produced by the entity (IPE) - Evaluate the design and implementation of Segregation of Duties (SOD) controls - Evaluate IT controls designed to prevent or detect fraud, including management override of controls - Assist with internal audit related projects, including technology audits as the program grows (e.g., cloud security, data governance, AI governance), documenting planning, scoping, audit programs, documentation request lists, track and communicate observations and management action plans as well as participate and lead walkthroughs - Use AI tools across the audit lifecycle (e.g., evidence review, walkthrough documentation, testing, drafting observations), with human review and documented validation of outputs - Build and maintain reusable prompts, workflows, and automations the team can run repeatedly, and identify opportunities to improve efficiency across audit projects - Help define how IA validates AI-assisted work so our external auditor can rely on it - Assess the risks of AI tools and agents in the financial reporting environment, including access, data handling, and change management - Performs other related duties as assigned Who You Are: - Strong understanding of SOX 404, PCAOB Auditing Standards, COSO 2013, COBIT, US GAAP, Internal Audit Standards, including auditing processes and methodologies. - Strong understanding scoping, design and testing IT related controls for homegrown and off the shelf applications and cloud environments (e.g., AWS) including: ITGCs, IT application controls, interfaces, key reports, segregation of duties, and SOC1 reviews - Previous experience auditing ITGCs related to CI/CD pipelines - Experience with planning, scoping, testing and reporting within a full year SOX program in your current or previous roles - Experience with leading the planning, scoping, execution and reporting on IT, operational or financial audits - Data analytics skills with experience in SQL, Python, Tableau, or any other data analytics or visualization tools - Hands-on experience using AI tools in your audit work, with concrete examples of how AI made the work faster or better, and an understanding of its limits (accuracy, confidentiality, over-reliance) - Experience in collaborating with a team of internal or co-sourced consulting resources - Excellent written and verbal communication skills, including the ability to drive influence and to discuss technical concepts to other stakeholders in a simple but informative manner. - Exceptional analytical and problem-solving skills with great attention to details, and an investigative mindset to get to the root cause. - Self-starter who demonstrates initiative, curiosity to learn (including about AI and emerging technologies), and displays a high energy level - Strong organization skills, ability to prioritize one’s workload and clearly communicate status - Experience in using SOX GRC tools such as Optro (formerly AuditBoard) and ERP systems e.g. Netsuite is strongly preferred. - Comfortable working in a fast-paced, high growth environment. - Working knowledge of AI governance frameworks (e.g., NIST AI RMF, ISO/IEC 42001) or AI audit credentials (e.g., ISACA AAIA) is a plus Education and Experience: - Bachelor's degree in Information Systems, Computer Science, Accounting, Business, or other relevant field. - 5+ years of IT audit experience in public accounting (i.e. Big 4 Accounting firms) and/or industry, including IT SOX controls testing, ideally in a Tech/SaaS environment. - Professional audit relevant certification - CISA preferred; CPA, CIA, or CISSP a plus. Physical Requirements: - Prolonged periods of sitting at a desk and working on a computer. - Occasional travel to office hubs. Now, the "About the Team and Role" prose: I'll combine the paragraphs before "Supervisory Responsibilities None." The posting starts with "At Klaviyo, we value the unique backgrounds..." that's company boilerplate? Actually it's part of the job posting intro. But the rules say remove boilerplate. However, the first paragraph is about Klaviyo's values and encouraging applicants. That might be considered company boilerplate. But the second paragraph "About The Team And Role" is specific to this role. I'll include from "About The Team And Role" onward. Let me read: "About The Team And Role Klaviyo’s Internal Audit (IA) function leverages industry best practices..." up to "Supervisory Responsibilities None." I'll include that as prose. Now, the "Massachusetts Applicants" is a specific legal notice. I'll include it. Now, the "Our salary range reflects..." paragraph is part of Pay. I'll incorporate into Pay section. The "Get to Know Klaviyo" and everything after is boilerplate, remove. Now, output ONLY HTML fragment. Let

Similar jobs

Senior Internal IT Auditor

Pacific Gas and Electric CompanyOakland, CA· 4 mo ago
Information Technology$105k/yrapply on dsp.prng.co

Senior Internal IT Auditor

Virginia State Corporation CommissionRichmond, VA· 3 mo ago
$73k–$90k/yrapply on careercenter.scc.virginia.gov