Grafana Labs05/06/2026
Senior IT SOX Audit Manager | United States | Remote
Salary not specified
MARKET
12,354 ₽median for this role
IT Support / Helpdesk · 64 jobs with disclosed pay
5,714half of the offers: 8,520–16,354145,833
The employer didn't disclose pay — compare with the market yourself.
United States (Remote)
Responsibilities
- 01Partner with the Head of Internal Audit to build and operate Grafana's IT SOX program from the ground up: scoping, risk assessment, control design, and testing across IT general controls (ITGCs) and key application controls tied to financial reporting
- 02Design and execute all phases of IT SOX activity: walkthroughs, design and operating effectiveness testing, documentation, status tracking, deficiency identification, and remediation validation
- 03Assess ITGCs and application controls across key financial systems and Grafana's cloud/SaaS environment (e.g., NetSuite, Salesforce, Workday)
- 04Own the IT SOX documentation library in partnership with the Business Process / Finance SOX lead (narratives, flowcharts, and IT risk-and-control matrices (RCMs), and keep it audit-ready at all times
- 05Drive deficiency management conversations with control owners, advocating for automation-first, scalable remediation over manual, siloed patches
- 06Own the relationship with external IT auditors, ensuring testing methodologies and documentation meet PCAOB standards and align with external auditor expectations to create the foundation for a future reliance strategy
- 07Leverage AI and automation to enhance scoping, testing, and continuous monitoring, building capabilities and operationalizing insights, not just running checklists
- 08Evaluate the IT control impact of new systems, tools, operations, and policies as Grafana scales
- 09Manage co-source partner resources while maintaining quality and driving consistency across the program
- 10Report on IT SOX status, risks, deficiencies, and remediation to the Head of Internal Audit and senior leadership
- 11Over time, help extend the function beyond SOX into broader technology and IT audit, and build, mentor, and scale a team as the organization grows
Requirements
- 0110+ years of progressive experience in IT SOX compliance, IT audit, or IT risk advisory in Big 4 (or similar) and/or an in-house audit, compliance, or risk management function
- 02Proven hands-on expertise in COSO, SOX 404, ITGCs, ITACs, and PCAOB audit standards
- 03Experience standing up, scaling, or transforming an IT SOX program, ideally in a pre-IPO or newly public, high-growth SaaS environment
- 04Experience auditing cloud-native, SaaS environments and modern ERPs and business applications (e.g., NetSuite, Salesforce, Workday)
- 05Track record of implementing or optimizing AI and automated compliance and audit capabilities
- 06Fluency in key frameworks such as COSO, COBIT, NIST CSF, and ISO 27001
- 07Experience with GRC / audit tools, or building home-grown solutions
- 08Strong project management and organizational skills with the ability to oversee complex programs and prioritize ruthlessly
- 09Proven ability to inform and influence senior management stakeholders
- 10You can influence without authority and make technical risk clear, urgent, and actionable
- 11CISA, CPA, CIA, or CISSP strongly preferred
- 12High integrity, ownership, curiosity, and a continuous-improvement mindset
What we offer
- 01100% remote company
- 02Team members across 40+ countries