Senior Internal IT Auditor

At Klaviyo we value the unique backgrounds experiences and perspectives each Klaviyo (we call ourselves Klaviyos) brings to our workplace each and every day. We believe everyone deserves a fair shot at success and appreciate the experiences each person brings beyond the traditional job requirements. If you’re a close but not exact match with the description we hope you’ll still consider applying. Want to learn more about life at Klaviyo? Visit a _ypr0glyw _zcxs1o36 _mizu194a _1ah3dkaa _ra3xnqa1 _128mdkaa _1cvmnqa1 _4davt94y _4bfu18uv _1hms8stv _ajmmnqa1 _vchhusvi _kqswh2mm _ect4ttxp _syaz13af _1a3b18uv _4fpr8stv _5goinqa1 _f8pj13af _9oik18uv _1bnxglyw _jf4cnqa1 _30l313af _1nrm18uv _c2waglyw _1iohnqa1 _9h8h12zz _10531ra0 _1ien1ra0 _n0fx1ra0 _1vhv17z1 klaviyo.com/careers;to see how we empower creators to own their own destiny.

About the team and role

Klaviyo’s Internal Audit (IA) function leverages industry best practices and adds value by developing consultative partnerships with operational leaders throughout the organization to monitor and improve internal controls processes and drive operating efficiencies. We’re building an AI-first audit function using AI and automation across the audit lifecycle. Klaviyo is looking for an experienced Sr. IT Internal Auditor who will be a key part of the Internal Audit function. This person will report to the VP of Internal Audit Compliance work closely with the Manager IT SOX and will work directly with key stakeholders across IT Security Business Intelligence Finance Accounting Legal People Operations Engineering Global Technology Solutions within the company. The primary focus of the role is IT SOX controls (including IT General Controls IT application controls and key reports) across our homegrown and third-party systems with the opportunity to grow into broader technology audits over time. The ideal candidate is an experienced professional who has broad experience with internal audit activities uses AI in their day-to-day work thrives on building companies and enjoys working in an exciting fast paced and evolving environment.

Supervisory Responsibilities

None.

How you ll make a difference

Be a part of the Internal Audit team collaborating with the company to strengthen the internal control environment and continuously improve our SOX program Advise system control owners on the design of internal controls while maintaining IA’s independence from implementing or operating controls and maintain the ITGC risk and control matrix within Optro our SOX project management system Perform end to end system walkthroughs to identify System Development Life Cycle Controls (SDLC) address risks and evaluate the related ITGC controls across homegrown applications (including code deployment and production access) and third-party SaaS Prepare audit documentation request list coordinate with controls owners and track request status Perform periodic testing to assess the design and operating effectiveness of controls including the buildout of test plans and audit workpapers in Optro Assess and track audit findings gaps including control weaknesses root cause and severity. Coordinate remediation of deficiencies with control owners via Optro Where needed prepare ITGC control training materials to help educate those responsible for performing control activities As needed review IT related policies and/or provide recommendations to policy owners Provide guidance and support to internal stakeholders as they address control deficiencies or make significant process changes Develop and maintain positive working relationships with process owners and stakeholders in various departments effectively to increase awareness of the importance of risk and controls and the role of Internal Audit Coordinate with co-sourced third party providers external auditors internal business partners to ensure engagement alignment and timely execution of audit work and the SOX program. Develop and communicate status reporting for ITGC related projects and internal audits Perform IT Application Control testing over in-scope systems including system interfaces and integrations Review SOC 1 reports complementary user entity controls and bridge letters for in-scope vendors Prepare key report testing over key reports used in the operation of key controls including information produced by the entity (IPE) Evaluate the design and implementation of Segregation of Duties (SOD) controls Evaluate IT controls designed to prevent or detect fraud including management override of controls Assist with internal audit related projects including technology audits as the program grows (e.g. cloud security data governance AI governance) documenting planning scoping audit programs documentation request lists track and communicate observations and management action plans as well as participate and lead walkthroughs Use AI tools across the audit lifecycle (e.g. evidence review walkthrough documentation testing drafting observations) with human review and documented validation of outputs Build and maintain reusable prompts workflows and automations the team can run repeatedly and identify opportunities to improve efficiency across audit projects Help define how IA validates AI-assisted work so our external auditor can rely on it Assess the risks of AI tools and agents in the financial reporting environment including access data handling and change management Performs other related duties as assigned

Who you are

understanding of SOX 404 PCAOB Auditing Standards COSO 2013 COBIT US GAAP Internal Audit Standards including auditing processes and methodologies. understanding scoping design and testing IT related controls for homegrown and off the shelf applications and cloud environments (e.g. AWS) including ITGCs IT application controls interfaces key reports segregation of duties and SOC1 reviews Previous experience auditing ITGCs related to CI/CD pipelines Experience with planning scoping testing and reporting within a full year SOX program in your current or previous roles Experience with leading the planning scoping execution and reporting on IT operational or financial audits Data analytics skills with experience in SQL Python Tableau or any other data analytics or visualization tools Hands-on experience using AI tools in your audit work with concrete examples of how AI made the work faster or better and an understanding of its limits (accuracy confidentiality over-reliance) Experience in collaborating with a team of internal or co-sourced consulting resources Excellent written and verbal communication skills including the ability to drive influence and to discuss technical concepts to other stakeholders in a simple but informative manner. Exceptional analytical and problem-solving skills with great attention to details and an investigative mindset to get to the root cause. Self-starter who demonstrates initiative curiosity to learn (including about AI and emerging technologies) and displays a high energy level organization skills ability to prioritize one’s workload and clearly communicate status Experience in using SOX GRC tools such as Optro (formerly AuditBoard) and ERP systems e.g. Netsuite is strongly preferred. Comfortable working in a fast-paced high growth environment. Working knowledge of AI governance frameworks (e.g. NIST AI RMF ISO/IEC 42001) or AI audit credentials (e.g. ISACA AAIA) is a plus

Education and Experience

Bachelor s degree in Information Systems Computer Science Accounting Business or other relevant field. 5+ years of IT audit experience in public accounting (i.e. Big 4 Accounting firms) and/or industry including IT SOX controls testing ideally in a Tech/SaaS environment. Professional audit relevant certification - CISA preferred CPA CIA or CISSP a plus.

Physical Requirements

Prolonged periods of sitting at a desk and working on a computer. Occasional travel to office hubs.
Massachusetts Applicants
It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

Our salary range reflects the cost of labor across various U.S. geographic markets. The range displayed below reflects the minimum and maximum target salaries for the position across all our US locations. The base salary offered for this position is determined by several factors including the applicant’s job-related skills relevant experience education or training and work location.

In addition to base salary our total compensation package may include participation in the company’s annual cash bonus plan variable compensation (OTE) for sales and customer success roles equity sign-on payments and a comprehensive range of health welfare and wellbeing benefits based on eligibility.

Your recruiter can provide more details about the specific salary/OTE range for your preferred location during the hiring process.

Base Pay Range For US Locations $100,000 $150,000 USD

This role may require up to 10% travel for purposes such as new hire onboarding client or partner work if applicable team meetings and industry events. Travel is coordinated in advance.

Get to Know Klaviyo

We’re Klaviyo (pronounced clay-vee-oh). We empower creators to own their destiny by making first-party data accessible and actionable like never before. We see limitless potential for the technology we’re developing to nurture personalized experiences in ecommerce and beyond. To reach our goals we need our own crew of remarkable creators ambitious and collaborative teammates who stay focused on our north star delighting our customers. If you’re ready to do the best work of your career where you’ll be welcomed as your whole self from day one and supported with generous benefits we hope you’ll join us.

AI fluency at Klaviyo includes responsible use of AI (including privacy security bias awareness and human-in-the-loop). We provide accommodations as needed.

By participating in Klaviyo’s interview process you acknowledge that you have read understood and will adhere to our a;source=gmail;ust=;usg= Guidelines for using AI in the Klaviyo interview Process. For more information about how we process your personal data see our a;source=gmail;ust=;usg=AOvVaw1axMoReIM1qwTbmaPcLI_b Job Applicant Privacy Notice.

Klaviyo is committed to a policy of equal opportunity and non-discrimination. We do not discriminate on the basis of race ethnicity citizenship national origin color religion or religious creed age sex (including pregnancy) gender identity sexual orientation physical or mental disability veteran or active military status marital status criminal record genetics retaliation sexual harassment or any other characteristic protected by applicable law.

p-message_pane_message__message c-message_kit__message c-message_kit__actions--default c-message_kit__blocks--rich_text c-message__message_blocks--rich_text p-block_kit_renderer__block_wrapper--first IMPORTANT NOTICE Our company takes the security and privacy of job applicants very seriously. We will never ask for payment bank details or personal financial information as part of the application process. All our legitimate job postings can be found on our official career site. Please be cautious of job offers that come from non-company email addresses (@klaviyo.com) instant messaging platforms or unsolicited calls. By clicking Submit Application you consent to Klaviyo processing your Personal Data in accordance with our Job Applicant Privacy Notice. If you do not wish for Klaviyo to process your Personal Data please do not submit an application. You can find our Job Applicant Privacy Notice a here;and a here (FR).

p-message_pane_message__message c-message_kit__message c-message_kit__actions--above