Gusto
IT Internal Controls
$205K–$265K
Denver, CO - Hybrid +3 · Full-time · Posted May 20, 2026
- Location
- Denver, CO - Hybrid
New York, NY - Hybrid
San Francisco, CA - Hybrid
San Francisco, CA - Hybrid - Experience
- 10+ years; no alternatives stated.
About the job
Own and scale IT general controls and SOX assurance across Gusto’s enterprise applications, while building AI- and automation-enabled continuous monitoring.
What you'll do
- Design and operate ITGCs, access governance, segregation-of-duties controls, and application change management.
- Lead audit readiness and remediation, partnering with Internal Audit, External Audit, and application teams.
- Build AI-augmented continuous controls monitoring and oversee control standards for internal AI and automation use cases.
What they ask for
- 10+ years of experience in IT controls, audit, or enterprise applications governance, with hands-on 1st-line control ownership across NetSuite, Workday, and/or Salesforce.
- Deep expertise in SOX 404, COSO, COBIT, ITGCs, and segregation-of-duties design and remediation.
- Track record leading external audits as the management-side owner.
- Experience building and deploying AI-augmented controls, plus familiarity with AI risks and agentic tooling such as Claude Code, MCPs, or LLM-based evidence pipelines.
Nice to have
- Public company or IPO readiness experience.
- Relevant certifications (CISA, CISSP, CIA, CPA, or equivalent) and familiarity with SOC 1/2, ISO 27001, NIST CSF, and PCI DSS.
Pay
$205,000-$220,000 /yr (base salary) in Denver & most remote locations; $245,000-$265,000 /yr (base salary) for San Francisco, Seattle & New York
Tools
NetSuite, Workday, Salesforce, Pathlock, SailPoint, Saviynt, Claude Code, MCPs
AI focus
Build AI-native continuous controls monitoring, including LLM-based evidence review, agentic control testing, and automated anomaly surveillance; assess and govern internal AI use cases and their controls.
Model-written summary · the original posting is authoritative