Senior Director, Internal Audit

DoorDash; Seattle (WA); On-site; USD 249,600 - 312,000; Full time

Benefits offered by this job

Equity grants

Premium healthcare

Job summary

DoorDash is seeking a Senior Director, IT Internal Audit to lead strategy, execution, and evolution of the global IT audit function. You will partner with technology, security, and engineering leaders to shape risk management practices and drive a scalable audit program.

You will oversee a broad portfolio including IT SOX, AI governance, data governance, and cybersecurity assurance, building a world‑class team and representing Internal Audit at senior levels.

Qualifications

• 15+ years of progressive experience in internal IT audit or risk management.
• Deep technical expertise in IT controls, ITGC, data governance, cybersecurity, cloud architecture and AI/ML risk.
• Strong leadership and ability to operationalize governance and control frameworks.

Responsibilities

• Define and execute a forward‑looking IT Internal Audit strategy aligned with business goals.
• Lead global IT SOX compliance program and partner with external auditors and the Audit Committee.
• Establish AI/ML audit strategy focusing on accountability, data ethics and lifecycle assurance.
• Strengthen enterprise data governance and information integrity through audits.
• Oversee IT operational and transformation audits including change management and modernization.
• Lead cybersecurity assurance program and monitor threat posture and incident readiness.
• Develop and mentor a global team of IT and cybersecurity auditors.

Skills

IT controls

ITGC

Cybersecurity

Cloud architecture

Data governance

Leadership

AI risks

Education

Bachelor's/Master’s degree in Information Systems/CS/Accounting

Tools

COSO

COBIT

NIST

ISO 27001

SOC 2

PCI DSS

SOX ITGC

Job description

About The Team

DoorDash’s Internal Audit team provides independent assurance that the company’s risk management, governance, and internal control processes are operating effectively. We are a small team that is looking to expand and bring on motivated professionals. We don’t think of ourselves as a typical audit function – we are obsessively focused on risks to the organization, which reflects in the type of projects we support and execute.

About The Role

We are seeking a Senior Director, IT Internal Audit to lead the strategy, execution, and evolution of DoorDash’s global IT audit function. In this highly visible role, you will help shape the technology risk management practices, oversee a broad portfolio of audits, and serve as a strategic advisor to DoorDash’s technology, security, and engineering leaders. You will bring deep technical audit expertise, exceptional leadership skills, and a passion for innovation to build and lead a world‑class IT audit organization that scales with the business.

Lead the strategic direction of IT Internal Controls and Assurance

• Define and execute a forward‑looking IT Internal Audit strategy aligned with DoorDash’s business goals and technology roadmap.
• Partner with executive leadership to identify, assess, and monitor key technology risks, including those tied to digital transformation and AI adoption.
• Collaborate closely with business and engineering leaders to understand their strategic objectives and provide guidance on navigating IT compliance in a practical, business‑first focused manner.
• Shape the annual IT audit plan to strike the right balance between compliance, operational resilience, and innovation.
• Drive the use of data analytics and automation to expand audit coverage and deliver more impactful insights.

Drive Global IT SOX Excellence

• Oversee DoorDash’s global IT SOX compliance program, maintaining a strong and scalable control environment across our complex and evolving technology landscapes.
• Act as a trusted partner to external auditors and the Audit Committee, ensuring transparency, alignment, and continuous improvement in IT governance.
• Foster a proactive control mindset by embedding governance principles into how technology is designed, built, and operated – ensuring systems are secure and compliant by design.
• Promote consistent standards of risk awareness and system reliability across all financial and technology environments.

Shape AI and Machine Learning Governance

• Establish and lead the development of DoorDash’s AI and ML audit strategy, focusing on accountability, fairness, data ethics, and regulatory compliance.
• Partner with AI Governance and technology leaders to define principles for model risk management and AI lifecycle assurance.
• Serve as a thought leader on emerging technology and AI risk, representing Internal Audit with senior stakeholders.
• Drive the integration of AI risk considerations into the broader enterprise risk framework.

Strengthen Enterprise Data Governance & Trust

• Provide strategic oversight of audits focused on data governance, privacy, and information integrity.
• Partner with data, security, and privacy leaders to build an enterprise‑wide data control framework that supports business growth while meeting compliance requirements.
• Champion a culture of data accountability and transparency, ensuring that data‑driven decisions are built on reliable, well‑controlled infrastructure.
• Promote the adoption of scalable tools and metrics to monitor data risk and enable proactive remediation.

Elevate IT Operational and Transformation Audits

• Oversee global IT operational audit programs focused on systems resilience, change management, and technology modernization.
• Anticipate and assess risks tied to major platform migrations, automation initiatives, and global expansion projects.
• Partner with technology and business leaders to embed risk management principles into digital transformation and product lifecycle initiatives.

Lead Cybersecurity Assurance Oversight

• Shape and lead DoorDash’s global cybersecurity audit and assurance program.
• Provide meaningful insights on cybersecurity threat posture, vulnerability management, and incident readiness to leadership and the Audit Committee.
• Partner with Global Security Governance and Privacy teams to ensure alignment with frameworks such as NIST, ISO 27001, and SOC 2, and emerging regulatory standards.
• Establish a proactive, analytics‑based approach to monitor cybersecurity risks and strengthen organizational resilience.

Leadership & Team Development

• Lead, mentor, and develop a global team of IT and cybersecurity auditors, empowering them to grow and deliver impactful work.
• Manage co‑sourced partners to ensure high‑quality deliverables and alignment with DoorDash’s culture and goals.
• Foster a collaborative, inclusive, and high‑performing environment where innovation, curiosity and critical thinking thrive.

Governance & Communication

• Drive the preparation and presentation of IT audit findings, insights, and recommendations to the Audit Committee and executive leadership.
• Collaborate with external auditors to coordinate audit activities, drive efficiency, and avoid overlap or duplication of efforts.
• Contribute to enterprise risk management and other strategic initiatives that strengthen DoorDash’s overall control environment and governance maturity.

We’re Excited About You Because…

• You have 15+ years of progressive experience in internal audit, IT audit, or risk management within a complex, global, fast‑paced, technology‑driven environment.
• You have deep technical expertise in IT controls, ITGC, data governance, cybersecurity, cloud architecture, systems implementation, and emerging tech risks (AI/ML, privacy, automation).
• You are a hands‑on leader with the ability to roll up your sleeves to operationalize IT compliance initiatives, drive execution, and ensure practical implementation of governance and control frameworks.
• You have a proven ability to oversee the governance of complex, cross‑functional system implementations, ensuring alignment with enterprise control frameworks, risk management objectives, and business outcomes.
• You are skilled in leveraging automation and next‑generation technologies (e.g. GenAI) to enhance audit efficiency, expand coverage, and deliver deeper, data‑driven insights.
• You have demonstrated the ability to navigate and assess complex technical and control environments, diagnose underlying issues, and design tailored, effective solutions suited to dynamic marketplace platforms.
• You have proven leadership experience building and leading high‑performing, geographically distributed teams and managing third‑party co‑source providers.
• You have strong familiarity with frameworks such as COSO, COBIT, NIST, ISO 27001, ISO 420001, SOC 2, PCI DSS, and relevant SOX ITGC requirements.
• You have professional certifications such as CISA, CISSP, CPA, or CIA (multiple preferred).
• You have experience collaborating across Engineering, Security, and Product functions to embed governance into technology design.
• You have excellent communication skills, executive presence, and the ability to translate technical findings into actionable business insights.
• You have a Bachelor’s or Master’s degree in Information Systems, Computer Science, Accounting, or related discipline.
• Must be comfortable regularly exercising discretion and independent judgment in performing job duties, including evaluating options, making informed decisions, and determining appropriate courses of action within the scope of assigned responsibilities.

Compensation

Base salary is determined based on job‑related factors and is localized according to an employee’s work location. The pay range for this position in the United States is $249,600—$312,000 USD.

In addition to base salary, the compensation for this role includes opportunities for equity grants.

Paid Time Off Details

• For salaried roles: flexible paid time off/vacation, plus 80 hours of paid sick time per year.
• For hourly roles: vacation accrued at about 1 hour for every 25.97 hours worked (e.g., about 6.7 hours/month if working 40 hours/week; about 3.4 hours/month if working 20 hours/week), and paid sick time accrued at 1 hour for every 30 hours worked (e.g., about 5.8 hours/month if working 40 hours/week; about 2.9 hours/month if working 20 hours/week).

About DoorDash

At DoorDash, our mission to empower local economies shapes how our team members move quickly, learn, and reiterate to make impactful decisions that display empathy for our range of users—from Dashers to merchant partners to consumers. We are a technology and logistics company that started by enabling door‑to‑door delivery, and we are looking for team members who can help us go from a company known as the place you order food to a company that people turn to for any and all goods.

DoorDash is growing rapidly and changing constantly, which gives our team members the opportunity to share their unique perspectives, solve new challenges, and own their careers. We’re committed to supporting employees’ happiness, healthiness, and overall well‑being by providing comprehensive benefits and perks including premium healthcare, wellness expense reimbursement, paid parental leave and more.

Statement of Non‑Discrimination

In keeping with our beliefs and goals, no employee or applicant will face discrimination or harassment based on race, color, ancestry, national origin, religion, age, gender, marital/domestic partner status, sexual orientation, gender identity or expression, disability status, or veteran status. Above and beyond discrimination and harassment based on protected categories, we also strive to prevent other subtler forms of inappropriate behavior (i.e., stereotyping) from ever gaining a foothold in our office. Whether blatant or hidden, barriers to success have no place at DoorDash. We value a diverse workforce – people who identify as women, non‑binary or gender non‑conforming, LGBTQIA+, American Indian or Native Alaskan, Black or African American, Hispanic or Latinx, Native Hawaiian or Other Pacific Islander, differently‑abled, caretakers and parents, and veterans are strongly encouraged to apply.

Pursuant to the San Francisco Fair Chance Ordinance, Los Angeles Fair Chance Initiative for Hiring Ordinance, and any other state or local hiring regulations, we will consider for employment any qualified applicant, including those with arrest and conviction records, in a manner consistent with the applicable regulation.

If you need any accommodations, please inform your recruiting contact upon initial connection.