Senior Internal IT Auditor

The posting, as Klaviyo wrote it

At Klaviyo, we value the unique backgrounds, experiences and perspectives each Klaviyo (we call ourselves Klaviyos) brings to our workplace each and every day. We believe everyone deserves a fair shot at success and appreciate the experiences each person brings beyond the traditional job requirements. If you’re a close but not exact match with the description, we hope you’ll still consider applying. Want to learn more about life at Klaviyo? Visit klaviyo.com/careers to see how we empower creators to own their own destiny.

About the team and role

Klaviyo’s Internal Audit (IA) function leverages industry best practices and adds value by developing consultative partnerships with operational leaders throughout the organization to monitor and improve internal controls, processes, and drive operating efficiencies. We’re building an AI-first audit function, using AI and automation across the audit lifecycle. Klaviyo is looking for an experienced Sr. IT Internal Auditor who will be a key part of the Internal Audit function. This person will report to the VP of Internal Audit & Compliance, work closely with the Manager, IT SOX, and will work directly with key stakeholders across IT, Security, Business Intelligence, Finance, Accounting, Legal, People Operations, Engineering & Global Technology Solutions within the company. The primary focus of the role is IT SOX controls (including IT General Controls, IT application controls, and key reports) across our homegrown and third-party systems, with the opportunity to grow into broader technology audits over time. The ideal candidate is an experienced professional who has broad experience with internal audit activities, uses AI in their day-to-day work, thrives on building companies and enjoys working in an exciting, fast paced and evolving environment.

Supervisory Responsibilities

None.

How you'll make a difference

• Be a part of the Internal Audit team collaborating with the company to strengthen the internal control environment and continuously improve our SOX program
• Advise system control owners on the design of internal controls, while maintaining IA’s independence from implementing or operating controls, and maintain the ITGC risk and control matrix within Optro, our SOX project management system
• Perform end to end system walkthroughs to identify System Development Life Cycle Controls (SDLC), address risks and evaluate the related ITGC controls across homegrown applications (including code deployment and production access) and third-party SaaS
• Prepare audit documentation request list, coordinate with controls owners and track request status
• Perform periodic testing to assess the design and operating effectiveness of controls; including the buildout of test plans and audit workpapers in Optro
• Assess and track audit findings / gaps including control weaknesses, root cause, and severity. Coordinate remediation of deficiencies with control owners via Optro
• Where needed, prepare

[…]
n ecommerce and beyond. To reach our goals, we need our own crew of remarkable creators—ambitious and collaborative teammates who stay focused on our north star: delighting our customers. If you’re ready to do the best work of your career, where you’ll be welcomed as your whole self from day one and supported with generous benefits, we hope you’ll join us.

AI fluency at Klaviyo includes responsible use of AI (including privacy, security, bias awareness, and human-in-the-loop). We provide accommodations as needed.

By participating in Klaviyo’s interview process, you acknowledge that you have read, understood, and will adhere to our Guidelines for using AI in the Klaviyo interview Process . For more information about how we process your personal data, see our Job Applicant Privacy Notice .

Klaviyo is committed to a policy of equal opportunity and non-discrimination. We do not discriminate on the basis of race, ethnicity, citizenship, national origin, color, religion or religious creed, age, sex (including pregnancy), gender identity, sexual orientation, physical or mental disability, veteran or active military status, marital status, criminal record, genetics, retaliation, sexual harassment or any other characteristic protected by applicable law.

IMPORTANT NOTICE: Our company takes the security and privacy of job applicants very seriously. We will never ask for payment, bank details, or personal financial information as part of the application process. All our legitimate job postings can be found on our official career site. Please be cautious of job offers that come from non-company email addresses (@klaviyo.com), instant messaging platforms, or unsolicited calls.

By clicking "Submit Application" you consent to Klaviyo processing your Personal Data in accordance with our Job Applicant Privacy Notice. If you do not wish for Klaviyo to process your Personal Data, please do not submit an application. You can find our Job Applicant Privacy Notice here and here (FR).