Senior Internal Controls & Audit Leader

Qualia; San Francisco (CA); Hybrid; USD 165,000 - 195,000; Full time

Benefits offered by this job

Health insurance

401k program

Commuter benefits

Parental leave

Flexible time off

Onboarding program

Job summary

Qualia seeks an experienced audit leader to own the SOC 1 program end to end, drive readiness, and manage the external examination process across its product suite.

You will run internal SOC 2 testing, assess control effectiveness, and partner with Security, Engineering, and Operations to close gaps before auditors raise findings. This in-house role builds documentation, cadence, and institutional knowledge for ongoing independence.

Qualifications

• 6+ years in internal or external audit, SOC reporting, or IT/financial controls.
• Direct, hands-on SOC 1 experience with building or auditing programs.
• Working knowledge of SOC 2 and Trust Services Criteria; testing controls in engineering environments.

Responsibilities

• Own the SOC 1 program end to end: readiness, examination lifecycle, evidence, gaps, and external audit management.
• Run internal SOC 2 control testing; assess operating effectiveness and close gaps with owners.
• Bring the capability in-house by building documentation, testing cadence, and processes.
• Establish a risk assessment framework and forward audit plan spanning finance, operations, and compliance.
• Collaborate with owners across Finance, Accounting, Security, Engineering, and Operations to design effective controls.
• Translate control status and findings for executive and Board audiences and customer diligence.
• Automate the audit function with AI-powered workflows for evidence collection and testing.

Skills

SOC reporting

Internal audits

Risk assessment

COSO/ICFR concepts

Job description

Qualia seeks an experienced audit leader to own the SOC 1 program end to end, drive readiness, and manage the external examination process across its product suite.

You will run internal SOC 2 testing, assess control effectiveness, and partner with Security, Engineering, and Operations to close gaps before auditors raise findings. This in-house role builds documentation, cadence, and institutional knowledge for ongoing independence.