Lead IT Audit & Tech Risk — AI-Driven Controls

Notion; San Francisco (CA); On-site; USD 185,000 - 220,000; Full time

Job summary

Notion seeks a strategic, technically fluent Lead IT Audit to partner with Engineering, Security, IT, and Finance. This role owns the IT SOX lifecycle, embeds robust controls across SDLC, and drives automation in testing and monitoring. Based in SF or NYC, it blends hands-on auditing with builder mentality in a fast-moving SaaS environment.

Ideal candidates bring 12+ years of IT audit/tech risk, certifications (CISA/CISSP/CISM), and strong communication to influence across the organization.

Qualifications

• 12+ years progressive IT audit, IT SOX, or tech risk experience in SaaS or tech companies.
• Strong understanding of PCAOB, SEC, COSO, COBIT, NIST and ITIL.
• Experience designing end-to-end IT audits across IT operations, architecture, and third-party risk.
• Ability translate frameworks into practical controls and testing procedures.

Responsibilities

• Own full IT SOX lifecycle from scoping to remediation and reporting.
• Design and operate ITGCs/ITACs and control testing procedures.
• Lead value-added operational IT and cybersecurity audits across cloud, identity, data protection and DR/BC.
• Partner with external auditors and cross-functional leaders to embed sound controls from day one.
• Champion AI-enabled automation for control testing and monitoring.

Skills

IT audit leadership

PCAOB standards

COSO

COBIT

NIST controls

Cloud security

Cybersecurity audits

Stakeholder management

Communication

Education

Bachelor's degree in information systems/computer science/accounting

CISA

CISSP

CISM

CIA

CPA

Tools

AWS

GCP

Azure

ITGC testing tools

Job description

Notion seeks a strategic, technically fluent Lead IT Audit to partner with Engineering, Security, IT, and Finance. This role owns the IT SOX lifecycle, embeds robust controls across SDLC, and drives automation in testing and monitoring. Based in SF or NYC, it blends hands-on auditing with builder mentality in a fast-moving SaaS environment.

Ideal candidates bring 12+ years of IT audit/tech risk, certifications (CISA/CISSP/CISM), and strong communication to influence across the organization.