The IT Audit Manager will play a critical role in evaluating and supporting the development of a strong IT SOX compliance program. Collaborating closely with IT, finance, GRC, and external auditors, this role will assess control effectiveness, identify gaps, and provide actionable recommendations for improvement. This role also offers the opportunity to manage additional IT audit activities, such as IT risk assessments, audit plans, and risk-based audits. It’s an exciting opportunity to shape a foundational compliance function and address challenges in a dynamic SaaS environment while influencing the company’s broader risk management approach.

This is a full time role that can be held from one of our US hubs or remotely in the United States.

What you’ll do at Figma:

• Oversee and manage all aspects of the IT SOX Compliance Program, including work streams for IT General Controls, Segregation of Duties, and application controls.
• Lead SOX planning, scoping, and audits for technology risks (e.g., cybersecurity, privacy, business resilience), including risk assessments of new products, process changes, and system implementations.
• Provide technical support in the assessment, design and implementation of IT General Controls (ITGC) and IT Application Control (ITAC) requirements through collaboration with GRC and IT Management. 
• Participate in systems upgrades and enhancements, as necessary, to review that internal controls over financial reporting are adequately identified and addressed
• Oversee and review control walkthroughs, documentation (e.g. flowcharts, control descriptions, in-scope systems listing) and quality assurance across all SOX IT areas. 
• Review ITGC control evidence for accuracy, completeness; evaluate reported deficiencies, validate the completion of remediation activities. 
• Coordinate testing of IPE, SOC reports, ITGCs, and automated controls in the SOX environment, while designing and refining test approaches for both new and existing controls.
• Participate in the preparation of materials and presentation of IT data for various SOX meetings (e.g. SOX Steering Committee; Internal Audit Planning discussions).
• Lead the IT audit planning process and manage IT Operational Risk Assessments and Audits to evaluate and enhance the effectiveness of IT controls, processes, and compliance with organizational policies