IT Compliance Lead

WE ARE VERITONE

Veritone (NASDAQ: VERI) designs human-centered AI solutions. Serving customers in the talent acquisition, media, entertainment and public sector industries, Veritone’s software and services empower individuals at the world’s largest and most recognizable brands to run more efficiently, accelerate decision making and increase profitability. Veritone’s leading enterprise AI platform, aiWARE™, orchestrates an ever-growing ecosystem of machine learning models, transforming data sources into actionable intelligence.

By blending human expertise with AI technology, Veritone advances human potential to help organizations solve problems and achieve more than ever before, enhancing lives everywhere. To learn more, visit .

The Enterprise Governance, Risk, and Compliance Group is responsible for Veritone's compliance with the provisions of multiple regulatory frameworks providing certification that our internal control environment is operating effectively. The group reports administratively to the Chief Information Security Officer and works closely with key stakeholders across business units, corporate functions, technology, and the second and third lines of defense.

The Compliance Lead is responsible for the management and execution of IT-related components of the SOX, FedRAMP, SOC 2, and other programs, including key IT-related risk assessments, IT general controls, IT application and interface controls, and assessing the impact to business processes of the overall IT environment.

• Lead the transformation of the Enterprise Governance, Risk, and Compliance group and play a critical role in the refinement of the IT-related components of the SOX, FedRAMP, SOC 2 and other compliance Programs.
• Act as a change manager for continual improvement of the internal control environment.
• Assist in the strategic direction of the group, including IT program methodology, policies, templates, and procedures and provide recommendations for changes.
• Facilitate the planning, risk assessment and scoping activities for IT processes, including assessment of recent systems implementation that may impact the design and/or operating effectiveness of internal controls.
• Lead walkthrough processes and collaborate with IT partners to identify areas where control enhancements and/or documentation improvements are needed (both process narratives and data flow diagrams).
• Oversee coordination between internal team members, internal and external auditors, and system/control owners to ensure cohesive and collaborative execution.
• Review testing approach and align expectations with external auditors to ensure documentation and testing complies with industry standards (including NIST and PCAOB) and allows for reliance by the external auditors.
• Review SOX testing for key general IT controls (ITGCs), IT application controls (ITACs), critical interfaces, and key reports/spreadsheets.
• Facilitate training with control owners and lead technical and process workshops.
• Maintain a high level of visibility across the organization with various levels of Management and serve as a key point of contact within the Security and Compliance Team.

• Bachelor's Degree OR 4 years of relevant experience.
• 7 years of experience in public accounting or large company IT audit, IT risk consulting and/or leading SOX program support/execution, Big 4 preferred.
• Professional certification including CISA, CIA and/or CPA required.
• Demonstrate and apply a thorough understanding of IT-related risks and controls for complex information systems, i.e. microservice and/or cloud computing environments.
• Deep understanding of risk management methodologies, frameworks, and principles (e.g., SOX, COBIT, NIST) to evaluate and recommend optimal approaches to mitigating risk.
• Strong knowledge of technology environments, including information security, infrastructure, data and software development (Cloud technologies, Windows, UNIX, Databases, Workday, etc.).
• Experience managing a team consisting of internal and outsources resources, including reinforcing performance in others, and facilitating their skill development.
• Proficiency with Microsoft…