IT Audit Director

See yourself at Twilio

Join the team as our next Director, IT Audit

Who we are & why we’re hiring

Twilio powers real-time business communications and data solutions that help companies and developers worldwide build better applications and customer experiences.

Although we're headquartered in San Francisco, we have presence throughout South America, Europe, Asia and Australia. We're on a journey to becoming a globally anti-racist, anti-oppressive, anti-bias company that actively opposes racism and all forms of oppression and bias. At Twilio, we support diversity, equity & inclusion wherever we do business. We employ thousands of Twilions worldwide, and we're looking for more builders, creators, and visionaries to help fuel our growth momentum.

About the job

This position is needed to scale and mature our SOX and internal audit program. The IT Audit DIrector leads and coordinates the internal audit program for information technology audits and oversees the IT SOX program. This role collaborates with executives, senior leadership, functional managers, and process owners to assess risks, evaluate the current internal control environment and business activities, test the efficacy of risk management procedures, plan for future process changes or technology system upgrades, and consider the potential effects of emerging risks areas. The team is focused on process improvements through not only its SOX program but also operational internal audits, including data analytics to help the business mature systems and processes, increasing efficiency and scalability while maintaining internal controls to mitigate risks.

Responsibilities

In this role, you’ll:

• Build and execute the strategic vision for IT Audit aligned to Twilio’s overall internal audit strategy. 
• Assist with SOX and IA plan development and execution identifying and documenting control deficiencies, impact and severity assessments, and ensuring workpaper quality
• Manage and drive an IT audit team (your direct reports), including managing co-source contractors
• Manage and lead the IT SOX program, including document requests and review of testwork
• Build relationships and collaborate across technology partners within Twilio to provide value-added feedback to address risks, identify control deficiencies, action plans, process improvement opportunities for efficient, effective and scalable processes
• Assist with developing and delivering meaningful data driven executive presentations, including senior leadership
• Translate control requirements to internal business partners and drive alignment with key partners (Corporate IT, Security, Privacy and R&D teams).  
• Work closely with the Enterprise Risk Team to evaluate and perform audits of key risk areas
• Proactively identify gaps or conflicts in existing processes and drive remediation of control deficiencies identified during the audit process.
• Advocate for the business value of the IT controls and governance to key business partners
• Qualifications 
• Not all applicants will have skills that match a job description exactly. Twilio values diverse experiences in other industries, and we encourage everyone who meets the required qualifications to apply. While having “desired” qualifications make for a strong candidate, we encourage applicants with alternative experiences to also apply. If your career is just starting or hasn't followed a traditional path, don't let that stop you from considering Twilio. We are always looking for people who will bring something new to the table!

Required:

• 10+ years leading and executing internal audits, internal controls and SOX compliance (Big 4 and Tech Industry a Plus)
• 5+ years people management experience 
• Strong focus on technology risks, not limited to major project developments, Change management, vulnerability management and/or evaluation of DevOps and Cloud Computing risks, IT general controls, and IT application controls, COSO, and COBIT.
• Experience in SOX (and others is a plus! PCI, COBIT, SOC, GDPR, etc.)
• Expansive knowledge of technology controls in various IT environments 
• Strategic, analytical and risk-based thinker 
• Ability to effectively communicate and obtain buy-in at all levels of the organization and with internal stakeholders across the business.
• Ability to identify areas for improvement in an existing control / process and drive change 
• Innovative thinker and problem solver with excellent communication skills, ability to distill key takeaways quickly and presentation skills that