In this role, you will :
- Develop, execute, and lead internal audit projects that provide effective coverage over technology, security, compliance, and other relevant risks and controls (e.g. enterprise security, IT strategy & operations, SaaS secure development lifecycle)
- Manage the execution of technology risk-focused IA projects, including identification of observations, communication to key stakeholders, and formal reporting of results to IA leadership and management
- Own and drive the SOX IT General Controls testing effort including coordinating and overseeing activities of the SOX ITGC testers, including outsourced vendor, and manage their delivery schedule including quality review of all their testing work-papers.
- Drive improvements in the SOX process, including implementing best practices, improving documentation, and driving consistency across the business
- Build and maintain relationships with key partners and collaborators across the business in technology-risk relevant teams (e.g. IT , Security, R&D functions)
- Champion, role model, and embed Samsara s cultural principles (Focus on Customer Success, Build for the Long Term, Adopt a Growth Mindset, Be Inclusive, Win as a Team) as we scale globally and across new offices
Minimum requirements for the role :
6+ years of relevant IT audit / risk / security / compliance (SOX) experience in an internal role or consulting, including experience leading others in these areasWorking experience leveraging SOX ITGC, cloud security, and IT governance frameworks (e.g. COBIT, NIST, ISO 27001, SOC 2 etc.)Strong verbal and written communication skills, with the ability to effectively communicate to senior executivesWorking experience leveraging AI tools in audit or risk-related processes (such as testing, automating workflows, etc).Strong project management skills with the ability to juggle multiple work efforts, be agile and adapt quickly to changing needsAn ideal candidate also has :
A bachelor s degree or equivalent in relevant fields of study - Information Systems, Computer Science, Engineering / Technology, Accounting, or other related fields is desirableRelevant professional certification(s) such as Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), Chartered Accountant (CA) or other technology / audit-related certificationsWorking experience executing technology risk-related security assessments and / or advisory engagements, including delivery of results to management and monitoring progress / completion of management action plansSkills Required
Sox, itgc, Cobit, nist, Iso 27001, Internal Auditing