Overview
GitLab is seeking a Senior Internal Auditor to help assess risk and strengthen controls across a technology landscape, including multi-cloud infrastructure and AI systems. This remote role supports the Sarbanes-Oxley Act (SOX) program and involves collaboration with various teams to improve audit quality and efficiency.
Key Responsibilities
- Execute technology audits covering SOX compliance, cloud infrastructure, application controls, cybersecurity, AI and machine learning systems, and DevSecOps practices.
- Design and test IT general controls, application controls, and entity-level controls.
- Support the IT SOX program from planning through reporting, including audit planning, testing, and coordination with external providers.
- Maintain clear, high-quality audit documentation, including matrices, process flows, and impact assessments.
- Partner with process owners on remediation efforts and prepare updates for leadership.
- Assess emerging risks and evaluate new system implementations for control adequacy.
- Review controls across financial statement cycles and third-party reports.
- Utilize data analytics and automation tools to enhance audit efficiency and quality.
Requirements
- Experience executing technology audits and supporting IT SOX programs.
- Knowledge of IT control frameworks and cloud security principles.
- Familiarity with modern development practices including Agile and DevOps.
- Strong written and verbal communication skills for explaining technical findings.
- A self-directed, collaborative approach to managing priorities.
- Bachelor’s degree in Accounting, IT, Computer Science, Finance, or related field, along with an active relevant professional certification.
Benefits
- Flexible Paid Time Off
- Team Member Resource Groups
- Equity Compensation & Employee Stock Purchase Plan
- Growth and Development Fund
- Parental leave
- Home office support
Location
Remote, Canada; Remote, United States
How to Apply
Please apply through the application process outlined by GitLab.
Deadline
No specific deadline mentioned.