Senior IT Internal Auditor

At Klaviyo, we value the unique backgrounds, experiences and perspectives each Klaviyo (we call ourselves Klaviyos) brings to our workplace each and every day. We believe everyone deserves a fair shot at success and appreciate the experiences each person brings beyond the traditional job requirements. If you’re a close but not exact match with the description, we hope you’ll still consider applying. Want to learn more about life at Klaviyo? Visit careers.klaviyo.com to see how we empower creators to own their own destiny.

Klaviyo’s Internal Audit (IA) function leverages industry best practices and adds value by developing consultative partnerships with operational leaders throughout the organization to monitor and improve internal controls, processes, and also drive operating efficiencies. Klaviyo is looking for an experienced Sr. IT Internal Auditor who will be a key part of the Internal Audit function. This person will report to the Director, Internal Audit, and will work directly with key stakeholders across IT, Finance, Accounting, Legal, Human Resources, Engineering & Global Technology Solutions within the company. The ideal candidate is an experienced professional who has broad experience with internal audit activities, thrives on building companies and enjoys working in an exciting, fast paced and evolving environment.  

How You'll Make a Difference:

• Be a part of the Internal Audit team collaborating with the company to build the internal control environment and prepare the company for SOX compliance
• Work collaboratively with the system control owners on the design of internal controls and maintain the ITGC risk and control matrix within Auditboard, our SOX project management system
• Perform end to end system walkthroughs to identify System Development Life Cycle Controls (SDLC), address risks and implement the related ITGC controls 
• Prepare audit documentation request list, coordinate with controls owners and track request status
• Perform periodic testing to assess the operating effectiveness of controls; including the buildout of test plans and audit workpapers in Auditboard
• Assess and track audit findings / gaps including control weaknesses. Coordinate remediation of deficiencies with control owners via Auditboard 
• Where needed, prepare ITGC control training materials to help educate those responsible for performing control activities
• As needed, review IT related policies and/or provide recommendations to policy owners
• Provide guidance and support to internal stakeholders as they address control deficiencies or make significant process changes
• Develop and maintain positive working relationships with process owners and stakeholders in various departments effectively, to increase awareness of the importance of risk and controls, and the role of Internal Audit
• Coordinate with co-sourced third party providers, external auditors, internal business partners to ensure engagement, alignment and timely execution of audit work and the SOX program.
• Develop and communicate status reporting for ITGC related projects and internal audits 
• Perform IT Application Control testing over in-scope systems 
• Lead and review management's documentation of  SOC1 testing at year end 
• Prepare key report testing over key reports used in the operation of key controls 
• Ensure management have designed and implemented appropriate Segregation of Duties (SOD) controls
• Assist with internal audit related projects documenting planning, scoping, audit programs, documentation request lists, track and communicate observations and management action plans as well as participate and lead walkthroughs

Who You Are:

• Bachelor's degree in Finance, Accounting, Business, Information Systems or other relevant field. 
• 4-5+ years of Public Accounting (i.e. Big 4 Accounting firms) or equivalent industry experience in financial/operational audit and SOX program management, ideally in a Tech/SaaS environment.
• Professional audit relevant certification - CPA, CIA, CISA, PMP, CFE.
• Strong understanding of SOX 404, PCAOB Auditing Standards, COSO 2013, US GAAP, Internal Audit Standards, including auditing processes and methodologies.
• Strong understanding scoping, design and testing IT related controls for homegrown and off the shelf applications including: ITGCs, IT application controls, interfaces, key reports, segregation of duties, and SOC1 reviews
• Previous experience auditing ITGCs related to CI/CD pipelines 
• Knowledge and experience with SOX program implementation for pre-IPO or newly public companies is a plus. 
• Experience with leading, planning, scoping, testing and reporti