> Markdown version of [/jobs/ext/1919318-sr-manager-it-internal-audit](https://www.wearedevelopers.com/jobs/ext/1919318-sr-manager-it-internal-audit). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Sr. Manager, IT Internal Audit - **Company:** Avalara Inc. - **Location:** United States (Remote available) - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Software as a Service, Control Objectives for Information and Related Technology (COBIT), Cyber Security, Information Systems, Information Technology Audit, Netsuite, Salesforce.Com, IT General Controls (ITGC), Data Analytics, RSA Archer Platform, Workday - **Published:** August 4, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=ab00b10693ac9f77 ## About the Role * A Bachelor's degree in Information Systems, Engineering, Risk Management, or related field. * 7+ years of progressive experience in IT audit (internal or external), with 3+ years in a people-leadership role within high-growth SaaS, FinTech, or technology companies. * CPA, CIA, CISA, CISSP, CCSP or CISM preferred - candidates holding multiple certifications or with deep IT audit and information security credentials are strongly preferred. * Deep expertise in internal auditing standards, ICFR/SOX compliance, GAAP, PCAOB standards, SEC regulations, COSO, and COBIT - with hands-on experience auditing cloud-native SaaS architectures, IT general controls, and cybersecurity frameworks (NIST, ISO 27001). * 5+ years managing complex ICFR/SOX compliance programs, ideally including experience standing up or transforming a SOX program during periods of rapid growth or M&A integration. * Exceptional project management and strategic planning skills, with a track record of managing competing priorities across a global audit portfolio and communicating risk to executive and board-level audiences. * Proven ability to recruit, develop, and retain top audit talent - building high-performance teams that punch above their weight in fast-paced, tech-forward environments. * Experience with Salesforce, NetSuite, Workday and modern audit/GRC platforms preferred. Hands-on experience with data analytics, AI/ML-driven auditing techniques, and emerging AI governance frameworks is highly valued. Familiarity with how large-scale SaaS companies deploy and govern AI - and the associated risk and compliance implications - is a significant differentiator. ## Description As Senior Manager, IT Internal Audit, you will be a key member of the leadership team driving Avalara's internal audit strategy. Reporting directly to the VP of Internal Audit, you will own the vision and execution of our IT internal audit plan, lead Avalara's IT ICFR/SOX program end-to-end, and lead high-impact audits spanning IT, security, privacy and compliance risks. This is a high-visibility role for an experienced audit leader who thrives at the intersection of technology and controls - someone who has operated in fast-moving SaaS environments and wants to build something, not just maintain it. You will work remotely from anywhere in the US, managing a team of internal and co-source resources, helping to modernize our audit function and support Avalara's approach to AI governance and responsible AI adoption. What Your Responsibilities Will Be: You will: * Drive cross-functional audit strategy with executive stakeholders across Security, Engineering, Compliance, Product, Risk Management, and G&A - designing and executing a risk-based IT audit plan that spans financial, operational, IT, security and compliance domains. * Manage multiple concurrent audit engagements end-to-end - from strategic scoping and risk prioritization through fieldwork, reporting, and remediation tracking - delivering actionable insights to senior leadership and the Audit Committee. * Contribute to the enterprise risk assessment framework, identifying emerging technology, cybersecurity, AI/ML, and business risks - and translating them into a forward-looking audit roadmap that keeps Avalara ahead of the curve. Serve as a trusted advisor to the business on AI governance, algorithmic risk, and the control implications of deploying AI across Avalara's products and operations. * Manage and help transform Avalara's IT ICFR/SOX compliance program, helping to set the standard for control design, testing methodology, and regulatory readiness - including evaluating how AI and automation can be embedded into the control environment to increase coverage, reduce latency, and strengthen assurance across a complex, global SaaS environment, while working in sync with Business Process internal auditors to ensure alignment. * Manage relationships with IT external auditors and ensure continued alignment and communication to avoid audit fatigue to internal stakeholders. * Lead annual technology risk assessments that directly shape the company's audit and enterprise risk management strategies - partnering with the C-suite, ERM, Engineering and Avatech to align priorities with Avalara's growth trajectory. * Deliver compelling, executive-ready audit reports that translate complex findings into clear business impact, actionable recommendations, and risk quantification for senior leadership and the Board. * Help build and develop a high-performing audit team - attracting top talent, developing future leaders, and fostering a culture of intellectual curiosity, continuous improvement, and operational excellence. * Champion the next generation of audit technology - deploying AI-powered anomaly detection, predictive risk scoring, automated control testing, and continuous monitoring to fundamentally reimagine how internal audit delivers value at Avalara. Build the team's AI fluency and establish repeatable frameworks for evaluating and adopting emerging tools. * Play a central role in Avalara's public company readiness journey, partnering with internal stakeholders and external audit, to build the controls infrastructure, governance frameworks, and audit capabilities required to operate as a best-in-class public company. * Lead high-priority strategic initiatives, M&A due diligence, and special investigations, bringing audit rigor and business acumen to Avalara's most consequential decisions ## Related Videos - [Hiring AI Native Talents](https://www.wearedevelopers.com/videos/100268-hiring-ai-native-talents) - [Destigmatizing the Workplace: Building Real Inclusion](https://www.wearedevelopers.com/videos/1492-destigmatizing-the-workplace-building-real-inclusion) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Agile work at CARIAD – Creating a customer web application for controlling the vehicle ](https://www.wearedevelopers.com/videos/200-agile-work-at-cariad-creating-a-customer-web-application-for-controlling-the-vehicle) - [How to govern Vibe Coding for the Enterprise](https://www.wearedevelopers.com/videos/100290-how-to-govern-vibe-coding-for-the-enterprise) - [The Future of Employee Wellbeing: Benefits, Trust & Performance](https://www.wearedevelopers.com/videos/1808-the-future-of-employee-wellbeing-benefits-trust-performance) ## Related Articles - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Navigating the AI Shift](https://www.wearedevelopers.com/magazine/629-navigating-the-ai-shift) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Coffee with Developers - Maria Apazoglou - Making AI understandable for all in production](https://www.wearedevelopers.com/magazine/475-coffee-with-developers-maria-apazoglou-making-ai-understandable-for-all-in-production) - [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence)