Senior IT Internal Auditor

Do you ever wonder what happens inside the cloud?

DigitalOcean (NYSE: DOCN) simplifies cloud computing so builders can spend more time creating software that changes the world. With our mission-critical infrastructure and fully managed offerings, DigitalOcean enables startups and small and medium-sized businesses (SMBs) to rapidly deploy and scale modern applications. As a remote-first organization, our employees, like our customers, are based around the world.

We want people who are passionate high performing team players who can take new challenges and go the extra mile.

The Senior IT Internal Auditor will assist in executing DigitalOcean’s public company SOX program, partnering with DO teams to help mature and sometimes establish the company’s internal control environment. Additionally, this role will work alongside other team members to perform non-SOX internal audits on operational processes and risks. The ideal candidate for this position will be someone who has relevant prior experience (such as IT Audit & SOX) and is comfortable working in a dynamic, fast-paced, technical environment. This position reports directly to the Manager, IT Audit & Risk. We only hire the best to these teams, and your work will have an impact on the future success of this rapidly growing company.

What You’ll Be Doing:

• Be part of the team, collaborating with the company to mature and sometimes establish the internal control environment and SOX compliance, specifically focused on ITGC (IT General Controls) and ITAC (IT Application Controls).
• Work collaboratively with the manager, other team members, and control owners on the design of internal controls and maintain the risk and control matrix within AuditBoard.
• Execute walkthroughs to validate the design of controls independently. 
• Perform periodic testing to assess the operating effectiveness of controls, including buildout of test plans and audit workpapers within AuditBoard.
• Prepare audit documentation request lists, coordinate with control owners, and track request status.
• Perform end to end process and/or system walkthroughs, where needed, build flows in flowchart format.
• Where needed, prepare control training materials to help educate those responsible for performing control activities.
• As needed, review policies and/or provide recommendations to policy owners on enhancement opportunities.
• Provide guidance and support to internal stakeholders as they address control deficiencies or make significant process changes (e.g., implementation of new systems).
• Develop and maintain positive working relationships with process owners and stakeholders in various departments effectively, to increase awareness of the importance of risk and controls, and the role of Internal Audit.
• Participate in non-SOX internal audits on operational processes and risk areas, including the development of the audit plan, audit report and data analytics using Google Data Studio, Power BI, Looker, Tableau or equivalent.
• Analyze company data to make recommendations on potential process improvements. Abstract complexity between business and IT topics to drive operational efficiency.

What You’ll Add to DigitalOcean:

Experience:

• 3-4+ years minimum, of job related experience – prior public accounting (Big 4) experience preferred, external or internal audit experience.
• Experience with leading, planning, scoping, testing and reporting for a full year SOX program in current or previous roles.
• Experience with leading the planning, scoping, execution and reporting of non-SOX internal audits.
• Data analytics skills with experience in using Google Data Studio, Looker, Tableau or equivalent.
• Strong knowledge of IT practices, including applications and infrastructure, security and vulnerability assessments, change management for homegrown product and billing platforms, and IT risk assessments.
• Proven understanding of concepts related to ITGCs, IT application controls, SOC1/SOC2s and technology risks.
• Proficient in conducting reviews of highly technical areas including current/emerging technologies and key layers of IT such as networks, databases, cloud services and applications, data and cyber security, operating systems, firewalls and third party risks.
• Knowledge of external leading risk and controls frameworks such as COBIT (Control Objectives for Information and related Technology) or COSO, NIST, and ISO27000.
• Experience with working with High Growth or Technology companies, and/or companies that have recently made a public stock offering.

Role Requirements:

• Bachelor’s degree from an accredited college/university in an appropria