AI-Powered IT Controls Engineer for Enterprise Apps

Gusto; San Francisco (CA); Hybrid; USD 245,000 - 265,000; Full time

Benefits offered by this job

Equity (RSUs)

Job summary

Gusto seeks an IT Controls Engineer to own ITGC design across NetSuite, Workday, Salesforce, and adjacent platforms, partnering with Internal Audit, IT, Security, and Finance to ensure SOX 404 compliance and a scalable controls environment.

You will lead 1st-line control ownership, drive SoD across ERP/HRIS/CRM, and advance AI-native continuous controls monitoring to reduce manual work and improve risk posture as the company scales.

Qualifications

• 10+ years of IT controls, audit, or enterprise applications governance experience across ERP/CRM.
• Strong SOX 404, COSO, COBIT knowledge with SoD design and remediation.
• Proven external/internal audit liaison with management-side ownership.
• Experience building AI-augmented controls work including automated testing/evidence pipelines.
• Excellent written and spoken communications for executives, auditors, and engineers.

Responsibilities

• Own ITGC design and operation across enterprise applications (logical access, change management, SDLC, operations, SoD).
• Lead the 1st-line control environment with application owners and engineers to embed controls into workflows.
• Drive SoD strategy across ERP/HRIS/CRM; manage monitoring tooling and evidence.
• Manage audit lifecycle as primary liaison with Internal/External Audit and SOX PMO.
• Build AI-native continuous controls monitoring and automated anomaly surveillance.
• Own controls posture for internal AI/automation portfolio and ensure controls travel with builds.
• Lead access governance and provisioning workflows, periodic reviews, and privileged access management.
• Govern application change management, approvals, and release evidence.
• Mature controls program via rationalization and automated controls adoption.
• Partner with Security/GRC, Legal, Finance, People Ops, and Revenue Ops to support business.

Skills

IT controls

SOX 404

Audit liaison

AI risk management

Communication

Tools

NetSuite

Workday

Salesforce

Pathlock

SailPoint

IGA platform

Job description

Gusto seeks an IT Controls Engineer to own ITGC design across NetSuite, Workday, Salesforce, and adjacent platforms, partnering with Internal Audit, IT, Security, and Finance to ensure SOX 404 compliance and a scalable controls environment.

You will lead 1st-line control ownership, drive SoD across ERP/HRIS/CRM, and advance AI-native continuous controls monitoring to reduce manual work and improve risk posture as the company scales.