Description
Okta is searching for an experienced Senior Internal Auditor to join their global Internal Audit team. The successful candidate will drive the execution of Okta's global Internal Audit and SOX IT compliance program.
Key Responsibilities:
- Lead and execute IT General Control (ITGC), IT Application Control (ITAC), and Information Produced by Entity (IPE/Key Reports) walkthroughs and testing across Okta's critical enterprise applications, infrastructure, and cloud environments.
- Operate with significant autonomy, collaborate closely with external auditors, mentor and review the work of auditors, and partner with Engineering, Information Security, and Finance stakeholders to safeguard the integrity of internal controls over financial reporting (ICFR).
- Prepare self-reviewed, audit-ready workpapers and documentation within Okta's GRC platform with clear evidence, testing samples, and audit conclusions requiring minimal editorial revision.
- Review staff and associate auditor work products, providing actionable coaching and feedback to elevate overall team quality and audit rigor.
- Identify opportunities to rationalize redundant controls, eliminate manual testing fatigue, and leverage automated system capabilities.
Required Qualifications:
- Bachelor's or Master's degree in Management Information Systems (MIS), Computer Science, Information Technology, Accounting, Finance, or related STEM/business discipline.
- 4-6 years of relevant experience in IT audit, SOX compliance, technology risk consulting, or internal controls assurance within a Big Four public accounting firm and/or a publicly traded enterprise.
- Deep functional knowledge of SOX 404 requirements, PCAOB standards, COBIT, NIST CSF, and the COSO internal control framework.
- Practical experience testing core enterprise systems, including ERP platforms, CRM/Billing systems, Identity & Access Management tools, and cloud environments.
Preferred Qualifications:
- Professional certification such as CISA (Certified Information Systems Auditor) strongly preferred; CIA, CISSP, CISM, or CPA is an added advantage.
- Direct hands-on experience using modern GRC tools such as Optro.
- Familiarity with database query languages (SQL) or data analytics platforms (Alteryx, Snowflake, Tableau) to automate testing validations.