IT Audit Project Manager

We are seeking a highly motivated, hands-on IT Audit Project Manager to join our Internal Audit team in San Jose, CA. In this individual contributor role, you will report directly to the Director of Internal Audit and lead the planning, execution, and reporting of complex IT audit engagements and SOX compliance across our enterprise tech landscape., 1. End-to-End Audit Execution & Project Management

• Lead and execute risk-based IT audits, SOX IT General Controls (ITGC) assessments, application control reviews, and integrated operational audits from scoping through final reporting.
• Serve as the hands-on primary internal audit contact for assigned audit initiatives, defining scope, creating audit programs, establishing project timelines, and ensuring deliverables meet high quality standards on schedule.
• Perform risk assessments to evaluate technical vulnerabilities, access governance, change management, and configuration security across operating systems, databases, cloud ecosystems, and enterprise applications.
• Draft clear, concise, and impact driven audit findings and partner with control owners to track issue remediation progress and perform assessments to verify successful resolution.
• Assess emerging risk areas, including AI/Generative AI governance, automated pipelines, data privacy (GDPR, CCPA), and Third-Party Risk Management (TPRM).
• Partner with leadership to integrate IT risks into the broader Enterprise Risk Management (ERM) framework, aligning audit coverage with key enterprise risk profiles and mitigation goals.

1. Enterprise Application & Control Testing * Evaluate, test, and validate ITGCs and automated application controls within business-critical platforms. * Audit segregation of duties (SoD), user access management, interface security, and custom workflows within core financial and operational software environments.

The ideal candidate brings 5-7 years of progressive experience, ideally derived from a Big 4 public accounting firm or a large-scale technology environment. You will combine strong project management discipline with deep technical audit expertise to independently evaluate enterprise risks, drive SOX compliance, and serve as a trusted advisor across tech and business teams., * Experience: 5-7 years of hands-on experience in IT Audit, Technology Risk, Information Security, or IT Compliance.

• Background: Big 4 public accounting firm experience or experience within a large-scale Tech/SaaS company is strongly preferred.
• Education: Bachelor’s degree in Information Systems, Computer Science, Cybersecurity, Accounting, Business, or a related technical discipline.
• Certifications: Active professional certification strongly preferred

• Technical Frameworks & Compliance:

• Deep understanding of Sarbanes-Oxley (SOX) Section 404 ITGCs, ITACs (IT-Dependent Automated Controls), and SOC 1 / SOC 2 reports.
• Solid working knowledge of industry frameworks: COBIT, NIST Cybersecurity Framework, ISO 27001, and COSO.

Preferred Qualifications & Skills

• Enterprise Application Expertise: Hands-on audit or control testing experience across core enterprise SaaS platforms such as Salesforce, Workday, and NetSuite.
• Data & Analytics: Experience using data analysis tools to analyze large datasets and automate control testing.
• Self-Starter Mindset: Demonstrated ability to manage projects independently with minimal supervision, navigating complex technical environments to drive results.
• Communication: Exceptional narrative writing skills and executive presence to effectively communicate risk findings to engineering, IT, and executive leadership in San Jose.

The pay range for this position at commencement of employment is expected to be between USD $114,000 and USD $229,000 per year.

However, base pay offered may vary depending on multiple individualized factors, including market location, job-related knowledge, skills, and experience. The total compensation package for this position may also include other elements, including a sign-on bonus, restricted stock units, and discretionary awards in addition to a full range of medical, financial, and/or other benefits (including 401(k) eligibility and various paid time off benefits, such as vacation, sick time, and parental leave), dependent on the position offered. Details of participation in these benefit plans will be provided if an employee receives an offer of employment.