IT Audit Manager

Summary

Join Figma's growing team and become our IT Audit Manager, playing a critical role in developing a strong IT SOX compliance program. You will collaborate with various teams to assess control effectiveness, identify gaps, and provide recommendations. This role involves managing IT audit activities, including risk assessments and audits. The position offers the opportunity to shape a foundational compliance function in a dynamic SaaS environment. This is a full-time role, offering the flexibility to work from one of our US hubs or remotely within the United States. Figma offers a competitive compensation and benefits package.

Requirements

• 7+ years in information security and IT auditing, with SOX compliance focus
• Experience in project management, SOX business controls, and ITGCs
• Demonstrated knowledge of PCAOB/SEC requirements and audit frameworks
• Proficiency in audit methodologies, governance concepts, tools, and best practices
• Experience with managing external auditor requirements and expectations
• Excellent written and verbal communication skills for effective information sharing
• Demonstrated ability to collaborate across Internal Audit and cross-functional teams

Responsibilities

• Oversee and manage all aspects of the IT SOX Compliance Program, including work streams for IT General Controls, Segregation of Duties, and application controls
• Lead SOX planning, scoping, and audits for technology risks (e.g., cybersecurity, privacy, business resilience), including risk assessments of new products, process changes, and system implementations
• Provide technical support in the assessment, design and implementation of IT General Controls (ITGC) and IT Application Control (ITAC) requirements through collaboration with GRC and IT Management
• Participate in systems upgrades and enhancements, as necessary, to review that internal controls over financial reporting are adequately identified and addressed
• Oversee and review control walkthroughs, documentation (e.g. flowcharts, control descriptions, in-scope systems listing) and quality assurance across all SOX IT areas
• Review ITGC control evidence for accuracy, completeness; evaluate reported deficiencies, validate the completion of remediation activities
• Coordinate testing of IPE, SOC reports, ITGCs, and automated controls in the SOX environment, while designing and refining test approaches for both new and existing controls
• Participate in the preparation of materials and presentation of IT data for various SOX meetings (e.g. SOX Steering Committee; Internal Audit Planning discussions)
• Lead the IT audit planning process and manage IT Operational Risk Assessments and Audits to evaluate and enhance the effectiveness of IT controls, processes, and compliance with organizational policies

Preferred Qualifications

• Experience with data analytics tools (e.g., ACL, IDEA) for audit processes
• Familiarity with emerging technologies and cloud security controls
• Background in cybersecurity risk assessments and frameworks (e.g., NIST, ISO)
• Hands-on experience with automated audit tools or SOX project management software
• Preferred certifications: CA, CPA, CIA, CISA, CFE
• Prior work in a fast-paced, tech-oriented environment

Benefits

• Health, dental & vision
• Retirement with company contribution
• Parental leave & reproductive or family planning support
• Mental health & wellness benefits
• Generous PTO
• Company recharge days
• A learning & development stipend
• A work from home stipend
• Cell phone reimbursement
• Sales incentive pay for most sales roles