<div class="content-intro"><p><em>At Klaviyo, we value the unique backgrounds, experiences and perspectives each Klaviyo (we call ourselves Klaviyos) brings to our workplace each and every day. We believe everyone deserves a fair shot at success and appreciate the experiences each person brings beyond the traditional job requirements. If you’re a close but not exact match with the description, we hope you’ll still consider applying. Want to learn more about life at Klaviyo? Visit <a class="_ymio1r31 _ypr0glyw _zcxs1o36 _mizu194a _1ah3dkaa _ra3xnqa1 _128mdkaa _1cvmnqa1 _4davt94y _4bfu18uv _1hms8stv _ajmmnqa1 _vchhusvi _kqswh2mm _ect4ttxp _syaz13af _1a3b18uv _4fpr8stv _5goinqa1 _f8pj13af _9oik18uv _1bnxglyw _jf4cnqa1 _30l313af _1nrm18uv _c2waglyw _1iohnqa1 _9h8h12zz _10531ra0 _1ien1ra0 _n0fx1ra0 _1vhv17z1" href="http://klaviyo.com/careers" data-renderer-mark="true">klaviyo.com/careers</a> to see how we empower creators to own their own destiny.</em></p></div><p><strong>About the team and role:</strong></p> <p>Klaviyo’s Internal Audit (IA) function leverages industry best practices and adds value by developing consultative partnerships with operational leaders throughout the organization to monitor and improve internal controls, processes, and drive operating efficiencies. We’re building an AI-first audit function, using AI and automation across the audit lifecycle. Klaviyo is looking for an experienced Sr. IT Internal Auditor who will be a key part of the Internal Audit function. This person will report to the VP of Internal Audit & Compliance, work closely with the Manager, IT SOX, and will work directly with key stakeholders across IT, Security, Business Intelligence, Finance, Accounting, Legal, People Operations, Engineering & Global Technology Solutions within the company. The primary focus of the role is IT SOX controls (including IT General Controls, IT application controls, and key reports) across our homegrown and third-party systems, with the opportunity to grow into broader technology audits over time. The ideal candidate is an experienced professional who has broad experience with internal audit activities, uses AI in their day-to-day work, thrives on building companies and enjoys working in an exciting, fast paced and evolving environment.</p> <p><strong>Supervisory Responsibilities:</strong></p> <p>None.</p> <p><strong>How you'll make a difference:</strong></p> <ul> <li>Be a part of the Internal Audit team collaborating with the company to strengthen the internal control environment and continuously improve our SOX program</li> <li>Advise system control owners on the design of internal controls, while maintaining IA’s independence from implementing or operating controls, and maintain the ITGC risk and control matrix within Optro, our SOX project management system</li> <li>Perform end to end system walkthroughs to identify System Development Life Cycle Controls (SDLC), address risks and evaluate the related ITGC controls across homegrown applications (including code deployment and production access) and third-party SaaS</li> <li>Prepare audit documentation request list, coordinate with controls owners and track request status</li> <li>Perform periodic testing to assess the design and operating effectiveness of controls; including the buildout of test plans and audit workpapers in Optro</li> <li>Assess and track audit findings / gaps including control weaknesses, root cause, and severity. Coordinate remediation of deficiencies with control owners via Optro</li> <li>Where needed, prepare ITGC control training materials to help educate those responsible for performing control activities</li> <li>As needed, review IT related policies and/or provide recommendations to policy owners</li> <li>Provide guidance and support to internal stakeholders as they address control deficiencies or make significant process changes</li> <li>Develop and maintain positive working relationships with process owners and stakeholders in various departments effectively, to increase awareness of the importance of risk and controls, and the role of Internal Audit</li> <li>Coordinate with co-sourced third party providers, external auditors, internal business partners to ensure engagement, alignment and timely execution of audit work and the SOX program.</li> <li>Develop and communicate status reporting for ITGC related projects and internal audits</li> <li>Perform IT Application Control testing over in-scope systems, including system interfaces and integrations</li> <li>Review SOC 1 reports, complementary user entity controls, and bridge letters for in-scope vendors</li> <li>Prepare key report testing over key reports used in the operation of key controls, including information produced by the entity (IPE)</li> <li>Evaluate the design and implementation of Segregation of Duties (SOD) controls</li> <li>Evaluate IT controls designed to prevent or detect fraud, including management override of controls</li> <li>Assist with internal audit related projects, including technology audits as the program grows (e.g., cloud security, data governance, AI governance), documenting planning, scoping, audit programs, documentation request lists, track and communicate observations and management action plans as well as participate and lead walkthroughs</li> <li>Use AI tools across the audit lifecycle (e.g., evidence review, walkthrough documentation, testing, drafting observations), with human review and documented validation of outputs</li> <li>Build and maintain reusable prompts, workflows, and automations the team can run repeatedly,