Auditor, IT SOX Compliance

About Rivian

Rivian is on a mission to keep the world adventurous forever. This goes for the emissions‑free Electric Adventure Vehicles we build, and the curious, courageous souls we seek to attract.

As a company, we constantly challenge what’s possible, never simply accepting what has always been done. We reframe old problems, seek new solutions and operate comfortably in areas that are unknown. Our backgrounds are diverse, but our team shares a love of the outdoors and a desire to protect it for future generations.

Join our organization as an IT Auditor! We seek a skilled and experienced professional with a strong background in information technology auditing. As an IT Auditor, you will be crucial in evaluating and assessing IT controls to ensure compliance with regulatory requirements and industry best practices. Reporting to the Audit Manager, you will contribute to the planning, execution, and reporting of IT audits, focusing on IT general controls (ITGCs), application controls, access controls, and data security.

• Ensure the integrity and resilience of Rivian’s growing technology landscape by evaluating IT systems, infrastructure, and controls at scale.
• Safeguard data and digital operations as a trusted advisor interfacing with IT, Security, Legal, and Finance to mitigate risk and enhance compliance.
• Drive audit excellence across Rivian’s enterprise technology stack-including AWS, SAP, and microservices-during a critical phase of global expansion.
• Advance investor and regulatory confidence by strengthening our SOX, cybersecurity, and application control environments through proactive testing and continuous improvement.

• Conduct Sarbanes‑Oxley (SOX) and IT operational audits, including planning, scoping, and executing audit procedures in accordance with established guidelines and standards.
• Evaluate and test ITGCs, application controls, and business‑related access controls to assess their effectiveness and identify potential risks.
• Review IT processes and systems to ensure compliance with relevant regulations and company policies.
• Collaborate with business units and IT teams to identify control gaps and recommend improvements.
• Assist in providing recommendations and guidance on control enhancements to mitigate identified risks.
• Work closely with external auditors during the audit process, providing requested documentation and addressing findings or recommendations.
• To enhance audit effectiveness, stay informed about emerging technologies, industry trends, and regulatory changes.
• Prepare audit reports and communicate findings, recommendations, and action plans to management.
• Assist in developing and implementing remediation plans for identified control deficiencies.
• Foster strong working relationships with stakeholders, promoting effective communication and collaboration.

Required:

• Bachelor’s degree in Information Systems, Computer Science, Accounting, or related field
• 2‑4 years of experience in IT auditing‑preferably in public accounting or corporate internal audit
• Familiarity with industry frameworks such as Sarbanes‑Oxley (SOX), COBIT, COSO, ISO 27001, and cybersecurity or data privacy regulations
• Hands‑on experience evaluating IT controls across cloud‑based environments (e.g., AWS), ERP systems (e.g., SAP), and microservice architectures
• Strong understanding of IT processes and systems, including application and access control design
• Excellent written and verbal communication skills, with the ability to translate technical content for both technical and non‑technical stakeholders
• Detail‑oriented with strong analytical, organizational, and time‑management skills
• High ethical standards, sound judgment, and commitment to confidentiality

Preferred:

• Relevant professional certifications such as CISA, CISSP, or equivalent

The salary range for this role is USD 78,200‑97,700 for Atlanta, Georgia‑based applicants; USD 78,200‑97,700 for Normal, Illinois‑based applicants; and USD 78,200‑97,700 for Plymouth, Michigan‑based applicants. These are the lowest and highest salaries we, in good faith, believe we would pay for this role at the time of this…