Responsibilities
- Manage SOC 1 and SOC 2 audits under AICPA guidelines by collaborating with external auditors and internal teams to refine IT control processes in a dynamic tech environment
- Support full-cycle SOX compliance activities, including system scoping, audit preparation, and delivering training to control owners in a high-growth regulated setting
- Serve as a strategic partner to technical and finance teams, interpreting compliance and audit requirements into effective, scalable controls compatible with modern infrastructure
- Conduct security and IT control gap analyses, assess design and operational effectiveness, and lead remediation initiatives with control owners
- Advance the maturity of IT general and application controls while aligning compliance with rapid product development cycles
- Ensure audit quality and accuracy by applying professional judgment to detect control weaknesses, evaluate risks, and guide teams through complex compliance issues
- Evaluate the impact of SOX control deficiencies and create risk-based, practical remediation strategies that satisfy auditors without impeding business operations
- Strengthen monitoring mechanisms and layered security controls across critical IT domains to enhance audit results and overall control resilience
- Collaborate across departments to uncover systemic issues, propose process enhancements, and implement sustainable solutions in a scaling organization
- Create and maintain well-documented, audit-ready materials such as data flow diagrams and process maps for high-risk financial and security processes
- Partner with internal and external auditors to help them understand complex IT environments and ensure audits are conducted efficiently and effectively
- Support evidence collection and continuous improvement efforts, including integrating automation to boost consistency, efficiency, and scalability
Benefits
- Deepen technical expertise by working within a modern infrastructure featuring cloud-native systems and real-time data processing
- Expand professional influence through collaboration with integrated, global teams and top-tier specialists across engineering and security
- Move beyond routine compliance tasks to help shape how controls are built and scaled in a growing, regulated tech environment
- Take on significant ownership and visibility while contributing to the evolution of a maturing audit and compliance function
Work Arrangement
Remote (Worldwide)
Other
- Applications are reviewed continuously unless a deadline is specified
- Applicants may omit age, date of birth, or educational dates from their resumes
- Candidates with criminal records are evaluated in compliance with the San Francisco Fair Chance Ordinance
- Job-related assessments may be part of the selection process
- Employer provides equal opportunity without discrimination based on race, ethnicity, age, gender identity, citizenship, religion, sexual orientation, disability, pregnancy, veteran status, or other protected traits