Klaviyo
Senior Internal IT Auditor
$100K–$150K
Boston, MA +1 · Senior · Full-time · Posted Oct 19, 2026
- Location
- Boston, MA
Boston, Massachusetts, United States - Experience
- 5+ years of IT audit experience in public accounting and/or industry, including IT SOX controls testing.
- Education
- Bachelor's degree in Information Systems, Computer Science, Accounting, Business, or another relevant field.
About the job
Conducts IT SOX audits and testing across homegrown and third-party systems, while helping build an AI-enabled Internal Audit function and supporting broader technology audits.
What you'll do
- Plan and perform ITGC, application control, key report, SOC 1, and segregation-of-duties testing; document results and track remediation.
- Advise control owners, coordinate with auditors and stakeholders, and report on ITGC projects and audit progress.
- Use and validate AI workflows across audit activities, assess AI risks in financial reporting, and support technology audits as the program expands.
What they ask for
- Strong understanding of SOX 404, PCAOB standards, COSO 2013, COBIT, US GAAP, and Internal Audit Standards.
- Experience scoping, designing, and testing IT controls across applications and cloud environments, including ITGCs, CI/CD, interfaces, key reports, and SOC 1 reviews.
- Experience with a full-year SOX program and planning, executing, and reporting IT, operational, or financial audits.
- Hands-on use of AI tools in audit work, with concrete examples and understanding of limitations.
Nice to have
- SOX GRC tools such as Optro and ERP systems such as NetSuite; CISA preferred, with CPA, CIA, or CISSP a plus.
- Working knowledge of AI governance frameworks such as NIST AI RMF or ISO/IEC 42001, or ISACA AAIA credentials.
Pay
$100,000 — $150,000 USD base salary
Tools
Optro, AWS, SQL, Python, Tableau, NetSuite, NIST AI RMF, ISO/IEC 42001
AI focus
Use AI across audit activities, build repeatable prompts and automations, define validation for AI-assisted work, and assess AI tool and agent risks in financial reporting.
Model-written summary · the original posting is authoritative