Senior IT Audit Leader - SOX & AI Controls

Klaviyo; Boston (MA); On-site; USD 100,000 - 150,000; Full time

Job summary

Klaviyo is seeking an experienced Sr. IT Internal Auditor to strengthen our IT SOX controls across homegrown and third‑party systems.

You will work with IT, Security, Finance, Legal and Engineering to design controls, perform testing and drive remediations in a fast‑paced, AI‑driven audit function. The role emphasizes SDLC controls, ITGC testing, and collaboration with cross‑functional teams, with opportunities to expand into broader technology audits as the program grows.

Qualifications

• Bachelor’s degree in Information Systems, Computer Science, Accounting, Business, or other relevant field.
• 5+ years IT audit experience in public accounting and/or industry with IT SOX controls testing.
• Professional audit certifications preferred: CISA; CPA/CIA/CISSP a plus.
• Experience auditing ITGCs in CI/CD pipelines and cloud environments (e.g., AWS).
• Familiarity with SOX GRC tools such as Optro and ERP systems preferred.

Responsibilities

• Strengthen the internal control environment and continuously improve the SOX program.
• Advise system control owners on internal controls design while maintaining IA independence.
• Perform end-to-end system walkthroughs to identify SDLC controls and assess ITGCs across apps and SaaS.
• Lead testing and documentation, coordinate remediation with control owners.
• Develop AI-enabled audit workflows and document validations for AI-assisted work.

Skills

SOX 404

PCAOB Standards

COSO 2013

ITGC controls

Auditing processes

Data analytics

SQL

Python

Tableau

AI in audit

Team collaboration

Education

Bachelor’s degree in IS/CS/Accounting/Business

Tools

Optro (AuditBoard)

Netsuite

ERP systems

Job description

Klaviyo is seeking an experienced Sr. IT Internal Auditor to strengthen our IT SOX controls across homegrown and third‑party systems.

You will work with IT, Security, Finance, Legal and Engineering to design controls, perform testing and drive remediations in a fast‑paced, AI‑driven audit function. The role emphasizes SDLC controls, ITGC testing, and collaboration with cross‑functional teams, with opportunities to expand into broader technology audits as the program grows.