Manager, IT SOX & Internal Audit

Location

This is an in-person role in the Phoenix, AZ office. Candidates must be based within a 50-mile commuting distance of the office and able to be physically present in the office 4 days a week.
About the Role

We are hiring a Manager, IT SOX & Internal Audit, to lead Opendoor's IT SOX program, technology audit coverage, system-implementation reviews, and automation initiatives. This role is highly technical and hands-on, partnering with Engineering, Security, Data, and Product to deliver a modern, AI-enabled approach to risk and controls.

You will lead IT risk assessments, manage

Information Technology General Controls (ITGCs) and automated control testing strategies, conduct deep technical reviews, support system implementations, and build automation using SQL, Python, and modern data tools.

This role is critical to building a scalable, efficient, automation-first SOX program.
What You'll Do
IT SOX Leadership & Program Ownership

• Lead Opendoor's IT SOX 404 program covering ITGCs, automated controls, and key system-generated reports.
• Drive the annual IT risk assessment and SOX scoping process.
• Lead walkthroughs, design assessments, testing strategies, and remediation.
• Manage external auditors/consultants and ensure PCAOB-aligned execution.

System Implementation Reviews & Project Support

• Lead IT SOX reviews for new system implementation, cloud launches, infrastructure changes, and major upgrades.
• Participate early in solution design to identify SOX and IT risks.
• Ensure each implementation includes adequate automated controls, access governance, and monitoring.
• Support a smooth and compliant implementation by mitigating risks early and ensuring required controls are designed, tested, and deployed.

Automation & Modern Audit Capabilities

• Use SQL and Python to automate testing, population validation, evidence analysis, and workflows.
• Build or enhance continuous monitoring scripts and data-driven audit procedures.
• Evaluate and audit AI/ML workflows, pipelines, and automation tools for controls and monitoring requirements.
• Partner with Engineering, Security, and Data Engineering to implement automated controls and reduce manual operational work.

Cloud, Security & Technology Governance

• Lead audits covering AWS infrastructure, Snowflake security, Databricks governance, and identity/access governance.
• Evaluate Dev Ops processes, change management, code deployment, and infrastructure-as-code.
• Review data flows, security controls, and operational reliability across cloud systems.
• Partner with Info Sec and Engineering to drive long-term remediation and control improvement.

SOX Program Management

• Maintain IT SOX documentation, RCMs, narratives, and testing strategy.
• Manage evidence collection and ensure accuracy and completeness of audit documentation.
• Track issues and remediation progress, prepare dashboards, and support SOX tooling enhancements.

Cross-Functional Leadership

• Serve as the primary advisor for IT SOX, cloud security controls, automation, and system implementation risks.
• Partner with Engineering, Product, Security, Data, and Accounting.
• Support operational audits, investigations, and special projects involving systems, cloud, or data quality.

What You Will Bring

Minimum Qualifications

• A minimum of 5+ years of IT SOX, IT audit, or Technology Risk experience.
• Experience reviewing or supporting system implementations, cloud migrations, and major upgrades.
• Expertise with data conversion testing, UAT planning, configuration reviews, and cutover readiness.
• Technical expertise in AWS, Snowflake, Databricks, and modern engineering environments.
• Proficiency in SQL and Python, with hands-on automation or audit scripting experience.
• Understanding of AI/ML risk, data pipelines, and automation workflows (preferred).
• Strong knowledge of COBIT, COSO, PCAOB, NIST, and IT security frameworks.
• Experience managing auditors or consulting teams.
• Excellent communication and stakeholder management skills.

Preferred Qualifications

• Some Big 4 Accounting experience in addition to industry experience
• Certifications:
  
  CISA, CISSP, CIA, CPA, AWS Cloud Practitioner, or similar
• Experience with SOC 1/SOC 2, PCI, ISO 27001, GDPR, or other cloud compliance frameworks
• Back…