# Staff Technical Program Manager, IT Audit & Governance

**Company**: MongoDB
**Location**: New York City
**Work arrangement**: hybrid
**Experience**: staff
**Job type**: full-time
**Category**: IT
**Industry**: Technology

**Apply**: https://job-boards.greenhouse.io/mongodb/jobs/8346181?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/job/staff-technical-program-manager-it-audit-and-5f151882-aa0/

## Description

We're looking for a senior, hands-on leader to own IT audit and governance across all of our applications, infrastructure, and systems.

You will be accountable for keeping IT audit-ready every day: SOX ITGCs and ITACs, plus the broader audit and governance obligations that touch the technology stack (SOC reports, ISO, security and regulatory audits).

This role is about accountability and execution. You will work with cross-functional IT leaders across Infrastructure, Engineering, Security, Cloud, Enterprise Applications, and Business Systems to make sure controls are owned, operated, evidenced, and remediated on time. You will also be the primary IT liaison to Internal Audit, Finance/SOX PMO, and external auditors.

## What You'll Do

- Own audit and governance across all IT

- Drive accountability and execution with IT leaders

- Own ITGC and ITAC compliance

- Design, operate, and strengthen controls

- Drive remediation and issue management

- Be the IT face to auditors and the business

- Lead and elevate the program

## What You'll Bring

- 8-12+ years of experience in IT audit, SOX compliance, IT governance, or technology risk (Big 4, internal audit, or in-house IT GRC)

- Deep, hands-on experience with SOX 404 ITGCs and ITACs in a public company

- Working knowledge of COSO, COBIT, and PCAOB AS 2201, and how external auditors approach IT reliance and ITAC testing

- Experience across modern technology environments: cloud (AWS/Azure/GCP), SaaS, ERP (e.g., Oracle, NetSuite, SAP), infrastructure, and identity/access platforms

- Familiarity with other frameworks and audits (SOC 1/SOC 2, ISO 27001, NIST) and how to harmonize them

- Proven track record of owning programs end-to-end and driving accountability and execution across multiple teams and senior leaders without direct authority

- Excellent communication and executive presence, including negotiating with auditors and briefing senior leadership

- Bachelor's degree in Information Systems, Accounting, Computer Science, or a related field

## What Success Looks Like

- First 90 days: Map the IT landscape, systems, control owners, and audit obligations. Build relationships with IT leaders, Finance, Internal Audit, and external auditors. Identify the top gaps, ownership issues, and quick wins.

- 6 months: Stand up a governance cadence with IT leaders, with clear ownership and on-time execution. Complete a full readiness cycle with controls evidenced on time and no surprises from auditors.

- 12 months: Reduce control count and manual effort through rationalization and automation, close prior-year findings, and establish a scalable, IT-owned audit and governance program with a consolidated audit calendar and framework

For more fresh new jobs, check out [yubhub.co](https://yubhub.co/).

## Skills

### Required
- SOX 404 ITGCs
- ITACs
- COSO
- COBIT
- PCAOB AS 2201
- Cloud (AWS/Azure/GCP)
- SaaS
- ERP (Oracle, NetSuite, SAP)
- Identity/access platforms
- SOC 1/SOC 2
- ISO 27001
- NIST

### Nice to have
- CISA
- CISSP
- CIA
- CPA
- GRC and audit tools (AuditBoard, ServiceNow GRC, Workiva, Archer)
- Data analytics skills (SQL, Python, Power BI/Tableau)
- DevOps/CI-CD
- Infrastructure-as-code
- Change management in agile environments

---

Source: [Apply at job-boards.greenhouse.io](https://job-boards.greenhouse.io/mongodb/jobs/8346181?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)