Senior Technology Auditor II

At Braze, we have found our people. We’re a genuinely approachable, exceptionally kind, and intensely passionate crew.

We seek to ignite that passion by setting high standards, championing teamwork, and creating work-life harmony as we collectively navigate rapid growth on a global scale while striving for greater equity and opportunity – inside and outside our organization.

To flourish here, you must be prepared to set a high bar for yourself and those around you. There is always a way to contribute: Acting with autonomy, having accountability and being open to new perspectives are essential to our continued success.

Our deep curiosity to learn and our eagerness to share diverse passions with others gives us balance and injects a one-of-a-kind vibrancy into our culture.

If you are driven to solve exhilarating challenges and have a bias toward action in the face of change, you will be empowered to make a real impact here, with a sharp and passionate team at your back. If Braze sounds like a place where you can thrive, we can’t wait to meet you.

Team Overview

The Internal Audit team plays a pivotal role in enhancing and protecting organizational value by providing risk-based and objective assurance, advice, and insight. Our team is dedicated to the core mission of strengthening internal controls, risk management, and compliance, while also harnessing the power of automation and audit analytics to drive innovation. Our goal is to provide a solid foundation that enables the company to thrive, enhance business and technology processes, and adapt seamlessly within a dynamic and evolving regulatory landscape.

WHAT YOU’LL DO

Responsibilities:

• IT SOX Compliance: Lead IT SOX compliance efforts, focusing on testing and reviewing IT General Controls (ITGCs), application controls, and cybersecurity measures. Manage documentation and collaborate with IT stakeholders and external auditors to ensure adherence to regulatory requirements
• Technology Audit Support: Conduct technology-focused operational audits, including assessments of IT infrastructure, cloud services, software development lifecycle (SDLC), privacy, AI and IT service management processes. Prepare technical documentation, lead meetings with IT teams, and write comprehensive audit reports
• Enterprise Risk Assessment: Contribute to the enterprise risk management program by evaluating IT-related risks, including cybersecurity threats, data privacy concerns, and technology dependencies. Develop IT-specific mitigation strategies and leverage automation tools for risk reporting
• Audit Analytics and Automation: Design and execute advanced data analytics and automation initiatives using SQL, Python, or other relevant tools. Analyze complex business and IT systems to provide actionable insights for improving business and IT processes and controls
• Relationship Management: Engage with cross-functional IT teams locally and internationally, leading technical discussions to ensure alignment of IT objectives with overall business goals and compliance requirements
  
  

WHO YOU ARE

To excel in this role, you will need a combination of technical expertise, interpersonal skills, and a commitment to upholding regulatory standards. Key qualifications and attributes we're looking for include:

• B.S. in Information Technology, Computer Science, Information Systems, or a related technical field
• Professional certification such as CPA, CIA, CISA or CISM
• Have at least 5 years of experience in IT audit, information security, or IT risk management
• Software/SaaS or Technology industry experience with subscription and professional services revenue 
• Demonstrate strong knowledge of IT infrastructure, cloud computing, cybersecurity, and software development processes
• Exhibit expertise in IT compliance frameworks (e.g., COBIT, ITIL, NIST, ISO 27001) and their application in audit contexts
• Exhibit knowledge of network security, access management, and data privacy regulations (e.g., GDPR, CCPA)
• Demonstrate experience in auditing DevOps and Agile development environments
• Strong skills in data analysis, including writing SQL queries, understanding database structures, and extracting actionable insights from complex datasets.
• Proven track record of supporting audits, note-taking, and facilitating meetings, ideally in international settings.
• Strong leadership skills, high EQ and proactive problem solving approach
• Ability to collaborate with onshore and offshore team(s)
• Experience using Workiva GRC platform is a plus
• Experience with data extraction, transformation and loading (ETL)