Klaviyo
Manager, IT SOX
$124K–$186K
Boston, MA +1 · Manager · Full-time · Posted Oct 19, 2026
- Location
- Boston, MA
Boston, Massachusetts, United States - Experience
- 8+ years of IT audit experience in public accounting and/or industry, including IT SOX controls testing; ideally in a Tech/SaaS environment. Experience managing or coaching auditors and/or co-sourced resources.
- Education
- Bachelor's degree in Information Systems, Computer Science, Accounting, Business, or another relevant field.
About the job
Leads Klaviyo’s IT SOX program and risk-based technology audits, managing an auditor and introducing responsible AI and automation across audit work.
What you'll do
- Own and execute the annual IT SOX program, including scoping, controls testing, deficiency remediation, stakeholder coordination, and status reporting.
- Plan and lead risk-based technology audits, including cloud security, cybersecurity, data governance, and AI governance.
- Coach the Sr. IT Internal Auditor and establish AI-assisted audit standards, reusable workflows, and automated testing approaches.
What they ask for
- Deep understanding of SOX 404, PCAOB Auditing Standards, COSO 2013, COBIT, US GAAP, and Internal Audit Standards.
- Experience leading planning, scoping, testing, and reporting for a full-year IT SOX program and leading technology audits.
- Experience auditing modern engineering environments, including CI/CD pipelines, access defined in code, and automated data pipelines.
- AI fluency, strong communication and project management skills, and data analytics experience.
Nice to have
- Experience with SOX GRC tools such as Optro and ERP systems such as NetSuite; CISA preferred, with CPA, CIA, or CISSP a plus.
- Working knowledge of AI governance frameworks such as NIST AI RMF or ISO/IEC 42001, or ISACA AAIA credential.
Pay
$124,000 — $186,000 USD (base salary)
Tools
Optro, AWS, SQL, Python, Tableau, NetSuite, NIST AI RMF, ISO/IEC 42001
AI focus
Uses AI and automation across the audit lifecycle; sets standards for reviewing, validating, and documenting AI-assisted work; builds reusable prompts and workflows; supports automated testing and continuous monitoring; assesses AI tool and agent risks in financial reporting and advises on controls for AI-driven processes.
Model-written summary · the original posting is authoritative