Senior IT SOX Audit Manager

Details

Grafana Labs is looking for a Senior Manager, IT SOX Audit to build and operate its IT SOX program from the ground up. This hands-on, high-visibility player-coach role reports to the Head of Internal Audit and partners with Finance, IT, Engineering, Security, external auditors, and senior leadership. The role initially operates as an individual contributor with the opportunity to expand into broader technology and IT audit and build a team over time.

Responsibilities

• Build and operate Grafana Labs' IT SOX program, including scoping, risk assessment, control design, and testing across IT general controls (ITGCs) and key application controls tied to financial reporting.
• Execute all phases of IT SOX activities, including walkthroughs, design and operating effectiveness testing, documentation, status tracking, deficiency identification, and remediation validation.
• Assess ITGCs and application controls across key financial systems and Grafana's cloud and SaaS environment, including NetSuite, Salesforce, and Workday.
• Own the IT SOX documentation library, including narratives, flowcharts, and IT risk-and-control matrices (RCMs), in partnership with the Business Process and Finance SOX lead.
• Drive deficiency management discussions with control owners and advocate for automation-first, scalable remediation.
• Manage the relationship with external IT auditors, ensuring testing methodologies and documentation meet PCAOB standards and external auditor expectations.
• Leverage AI and automation to improve scoping, testing, continuous monitoring, and audit assurance capabilities.
• Evaluate the IT control impact of new systems, tools, operations, and policies as Grafana scales.
• Manage co-sourced partner resources while maintaining quality and consistency across the program.
• Report IT SOX status, risks, deficiencies, and remediation progress to the Head of Internal Audit and senior leadership.
• Over time, help expand the function beyond SOX into broader technology and IT audit, and build, mentor, and scale a team.

Requirements

• 10+ years of progressive experience in IT SOX compliance, IT audit, or IT risk advisory in Big 4 or similar firms and/or in-house audit, compliance, or risk management functions.
• Hands-on expertise in COSO, SOX 404, ITGCs, IT application controls (ITACs), and PCAOB audit standards.
• Experience establishing, scaling, or transforming an IT SOX program, ideally in a pre-IPO or newly public, high-growth SaaS environment.
• Experience auditing cloud-native and SaaS environments and modern ERP and business applications such as NetSuite, Salesforce, and Workday.
• Experience implementing or optimizing AI and automated compliance and audit capabilities.
• Fluency in COSO, COBIT, NIST CSF, and ISO 27001 frameworks.
• Experience with GRC and audit tools or building home-grown solutions.
• Strong project management and organizational skills, including the ability to oversee complex programs and prioritize effectively.
• Ability to influence senior management stakeholders without direct authority and communicate technical risk clearly and actionably.
• CISA, CPA, CIA, or CISSP strongly preferred.
• High integrity, ownership, curiosity, and a continuous-improvement mindset.

Bonus Qualifications

• Combined Big 4 or similar and in-house audit, compliance, or risk management leadership experience.
• Experience in a pre-IPO or newly public, high-growth, consumption- or usage-based SaaS technology company.
• CPA, CISM, CRISC, or CGEIT certification.
• ISACA AAIA certification or demonstrated investment in AI governance and audit innovation.
• Experience expanding audit functions beyond SOX into technology, operational, or advisory assurance.
• Experience working in globally distributed organizations.

Benefits

• United States base compensation of $163,000-$195,000 per year.
• Restricted Stock Units (RSUs) for all roles.
• 100% remote work in a global culture.
• Career growth pathways.
• In-person onboarding.
• Global annual leave policy of 30 days per year, including three Grafana Shutdown Days.
• Grafana Labs may utilize AI tools in its recruitment process to assist in matching CV information to job postings, while recruiters continue to manually review applications.

Grafana Labs is an equal opportunity employer.