The opportunity
At Klaviyo, we value the unique backgrounds, experiences and perspectives each Klaviyo (we call ourselves Klaviyos) brings to our workplace each and every day. We believe everyone deserves a fair shot at success and appreciate the experiences each person brings beyond the traditional job requirements.
What you'll do
Day-to-day management and coaching of the Sr. IT Internal Auditor, including: setting priorities, reviewing workpapers, and providing feedback and development
Oversight of co-sourced IT testing, including review of workpapers for quality and consistency
Own the annual IT SOX plan, including risk assessment, scoping of in-scope: systems, and alignment with our external auditor on reliance and timing
Scale and rationalize IT SOX scope as Klaviyo’s systems and business evolve
Lead end-to-end execution of the IT SOX program across ITGCs (logical access,: change management including CI/CD, IT operations), IT application controls, system interfaces and integrations, key reports/IPE, and segregation of duties (SOD), across homegrown applications and third-party SaaS
Maintain the ITGC risk and control matrix within Optro, our SOX project management system
What they're looking for
- Review SOC 1 reports, complementary user entity controls, and bridge letters for in-scope vendors
- Evaluate IT deficiencies, including root cause and severity, and drive: remediation with control owners through closure
- Coordinate with co-sourced third party providers, external auditors, and: internal business partners to ensure alignment and timely execution of IT SOX work
- Provide ongoing SOX readiness advisory to business partners on new system: implementations and significant changes, including SDLC controls, while maintaining IA’s independence from implementing or operating controls
