Senior IT SOX Audit Manager, Grafana Labs

• This is ideal for someone who enjoys building from scratch, partnering closely with stakeholders, and leveraging modern tools, including AI, to deliver efficient, high-impact assurance
• 10+ years of progressive experience in IT SOX compliance, IT audit, or IT risk advisory in Big 4 (or similar) and/or an in-house audit, compliance, or risk management function
• Proven hands-on expertise in COSO, SOX 404, ITGCs, ITACs, and PCAOB audit standards
• Experience standing up, scaling, or transforming an IT SOX program, ideally in a pre-IPO or newly public, high-growth SaaS environment
• Experience auditing cloud-native, SaaS environments and modern ERPs and business applications (e.g., NetSuite, Salesforce, Workday)
• Track record of implementing or optimizing AI and automated compliance and audit capabilities
• Fluency in key frameworks such as COSO, COBIT, NIST CSF, and ISO 27001
• Experience with GRC / audit tools, or building home-grown solutions
• Strong project management and organizational skills with the ability to oversee complex programs and prioritize ruthlessly
• Proven ability to inform and influence senior management stakeholders. You can influence without authority and make technical risk clear, urgent, and actionable
• CISA, CPA, CIA, or CISSP strongly preferred
• High integrity, ownership, curiosity, and a continuous-improvement mindset

Desirable

• We're looking for a Senior Manager, IT SOX Audit to help stand up Grafana Labs' IT SOX program from the ground up as we scale our controls and governance for our next stage of growth
• This is a hands-on, high-visibility role reporting to the Head of Internal Audit, with direct exposure to Finance, IT, Engineering, Security, and senior leadership
• This is a player-coach individual contributor role today. You'll architect and execute the IT SOX program yourself and with external consultant support, influencing through expertise rather than direct reports
• As the function matures, you'll have the opportunity to broaden your scope into technology and IT audit and to build and lead a team over time
• Success here isn't measured by control test completion rates or a tally of audit projects. It's measured by whether Grafana is more risk-intelligent, better controlled, and able to continue to scale because of your work
• Partner with the Head of Internal Audit to build and operate Grafana's IT SOX program from the ground up: scoping, risk assessment, control design, and testing across IT general controls (ITGCs) and key application controls tied to financial reporting
• Design and execute all phases of IT SOX activity: walkthroughs, design and operating effectiveness testing, documentation, status tracking, deficiency identification, and remediation validation
• Assess ITGCs and application controls across key financial systems and Grafana's cloud/SaaS environment (e.g., NetSuite, Salesforce, Workday])
• Own the IT SOX documentation library in partnership with the Business Process / Finance SOX lead (narratives, flowcharts, and IT risk-and-control matrices (RCMs), and keep it audit-ready at all times
• Drive deficiency management conversations with control owners, advocating for automation-first, scalable remediation over manual, siloed patches
• Own the relationship with external IT auditors, ensuring testing methodologies and documentation meet PCAOB standards and align with external auditor expectations to create the foundation for a future reliance strategy
• Leverage AI and automation to enhance scoping, testing, and continuous monitoring, building capabilities and operationalizing insights, not just running checklists
• Evaluate the IT control impact of new systems, tools, operations, and policies as Grafana scales
• Manage co-source partner resources while maintaining quality and driving consistency across the program
• Report on IT SOX status, risks, deficiencies, and remediation to the Head of Internal Audit and senior leadership
• Over time, help extend the function beyond SOX into broader technology and IT audit, and build, mentor, and scale a team as the organization grows