Senior Internal Auditor

Okta; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

The World’s Identity Company is seeking an experienced Senior Internal Auditor to join our global Internal Audit team and drive the successful execution of the company’s SOX IT compliance program. In this role you will lead ITGC, ITAC, and IPE walkthroughs across enterprise apps, cloud environments, and infrastructure, collaborating with Engineering, Security, and Finance to safeguard ICFR.

You will mentor staff, improve methodologies, and partner with external auditors to ensure timely,

Qualifications

• Bachelor’s or Master’s degree in MIS, Computer Science, Information Technology, Accounting, Finance, or related STEM/business discipline.
• 4–6 years of relevant IT audit/SOX experience in a Big Four or high-growth SaaS/cloud company.

Responsibilities

• Lead end-to-end SOX IT walkthroughs and testing (TOD/TOE) per methodology.
• Assess IT General Controls across domains: security, change management, operations.
• Evaluate ITAC, IPE, data integrations, and interface reconciliations.
• Review SOC 1/2 Type II and assess CUECs for hosted/SaaS.
• Support Internal Audits and staff coaching.
• Prepare audit-ready workpapers in the GRC platform.
• Draft deficiency write-ups and remediation plans with owners.
• Track MAPs and perform remediation testing.
• Coordinate with external auditors and facilitate walkthroughs.

Skills

SOX 404 knowledge

PCAOB standards

COBIT

NIST CSF

COSO framework

English communication

Cross-functional collaboration

SOX methodology

Education

Bachelor's/Master's in MIS/CS/IT/Accounting

Tools

Optro

SQL

Alteryx

Snowflake

Tableau

GitHub

Jira

Job description

**Secure Every Identity, from AI to Human

**Identity is the key to unlocking the potential of AI. the company secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence.

This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk.

Get to Know the company

the company is The World’s Identity Company. We free everyone to safely use any technology—anywhere, on any device or application. Our Workforce Identity Cloud and Customer Identity Cloud (Auth0) solutions enable secure yet flexible access, authentication, and automation that transforms how people move through the digital world, putting Identity at the heart of business security and growth.

At the company, we celebrate a variety of perspectives and experiences. We are not looking for someone who checks every single box—we’re looking for lifelong learners and owners who can make us better with their unique experiences, technical acumen, and passion for continuous improvement.

*Join our team! We’re building a world where Identity belongs to you.*

About the Role

the company is searching for an experienced, detail-oriented, and high-impact Senior Internal Auditor to join our global Internal Audit team and drive the successful execution of the company’s global Internal Audit and SOX IT compliance program.

In this role, you will lead and execute IT General Control (ITGC), IT Application Control (ITAC), and Information Produced by Entity (IPE/Key Reports) walkthroughs and testing across the company’s critical enterprise applications, infrastructure, and cloud environments. You will operate with significant autonomy, collaborate closely with external auditors, mentor and review the work of auditors, and partner with Engineering, Information Security, and Finance stakeholders to safeguard the integrity of internal controls over financial reporting (ICFR).

Key Responsibilities1. Audit Execution & Testing (ITGC & ITAC)

• Independently lead end-to-end SOX IT walkthroughs and execute design (TOD) and operating effectiveness (TOE) testing in strict alignment with the company’s Internal Audit and SOX methodology.

• Assess IT General Controls across all primary domains:

• Logical Access & Security: User lifecycle management (provisioning/deprovisioning), privileged access management (PAM), multi-factor authentication (MFA), and segregation of duties (SoD).

• Change Management: Source code repository management, deployment approval gates, testing validation, emergency changes, and CI/CD pipeline controls.

• Computer Operations & Resiliency: Automated batch job scheduling and monitoring, data backup verification, incident/problem management, and disaster recovery.

• Perform rigorous evaluations of automated application controls (ITAC), system-generated reports/queries (IPE), key data integrations, and interface reconciliations.

• Review third-party Service Organization Control reports (SOC 1 / SOC 2 Type II) to evaluate complementary user entity controls (CUECs) and determine impacts on in-scope hosted/SaaS systems.

• Participate and support Internal Audits planned for the year.

2. Workpaper Quality, Staff Coaching & Methodology

• Prepare self-reviewed, audit-ready workpapers and documentation within the company's GRC platform with clear evidence, testing samples, and audit conclusions requiring minimal editorial revision.

• Review staff and associate auditor work products, providing actionable coaching and feedback to elevate overall team quality and audit rigor.

• Actively champion SOX methodology improvements, control standardization, and testing efficiencies across the Internal Audit team.

3. Deficiency Evaluation & Stakeholder Advisory

• Pinpoint systemic root causes of control breakdowns and bridge technical gaps between engineering realities and compliance expectations—moving beyond symptom identification.

• Draft precise, well-contextualized deficiency write-ups and collaborate with control owners (TDI, Security, Engineering, and Finance) to reach alignment on remediation strategies and Compensating Controls.

• Track Management Action Plans (MAPs) and perform remediation testing to validate sustained resolution of identified gaps.

• Support direct audit coordination with external auditors, effectively addressing queries and facilitating seamless walkthroughs and sample validations.

4. Automation & Continuous Improvement

• Identify opportunities to rationalize redundant controls, eliminate manual testing fatigue, and leverage automated system capabilities.

• Assist in incorporating data analytics, scripting, and RPA/bot governance to streamline audit sample extraction, configuration inspections, and continuous control monitoring.

Required Qualifications

• Education: Bachelor’s or Master’s degree in Management Information Systems (MIS), Computer Science, Information Technology, Accounting, Finance, or related STEM/business discipline.

• Experience:4–6 years of relevant experience in IT audit, SOX compliance, technology risk consulting, or internal controls assurance within a Big Four public accounting firm and/or a publicly traded enterprise (high-growth SaaS / cloud technology company preferred).

• Technical Mastery:

• Deep functional knowledge of SOX 404 requirements, PCAOB standards, COBIT, NIST CSF, and the COSO internal control framework.

• Practical experience testing core enterprise systems, including ERP platforms (e.g., NetSuite, Workday), CRM/Billing systems (Salesforce), Identity & Access Management tools, and cloud environments (AWS, GCP, Azure).

• Demonstrated track record evaluating ITGCs, automated application controls, and complex report/query logics (IPE).

• Deficiency & Root Cause Analysis: Proven capability in assessing control deficiencies, determining financial statement impact/significance, and formulating corrective actions with process owners.

• Communication & Collaboration: Excellent verbal and written English communication skills; demonstrated confidence in facilitating walkthroughs and presenting findings to cross-functional leadership.

• Global Team Player: Self-motivated mindset with the ability to operate independently across distributed time zones (including supporting Pacific Time collaboration when necessary).

Preferred Qualifications

• Professional certification such as CISA (Certified Information Systems Auditor) strongly preferred; CIA, CISSP, CISM, or CPA is an added advantage.

• Direct hands-on experience using modern GRC tools such as Optro.

• Familiarity with database query languages (SQL) or data analytics platforms (Alteryx, Snowflake, Tableau) to automate testing validations.

• Understanding of modern DevOps environments, cloud security posture, and CI/CD release management tools (e.g., GitHub, Jira).