Navan · 1 day ago
Senior Manager, IT Audit & SOX Compliance
San Francisco, CA
Full-time
Hybrid
Senior Level, Lead/Staff
$107K/yr - $200K/yr
8+ years expNavan is seeking an IT Audit Senior Manager to lead their IT Internal Audit and IT SOX compliance efforts. The ideal candidate will manage audit requests, perform risk assessments, and drive process improvement in a high-growth public tech environment.
Business TravelFinancial ServicesPaymentsSoftware
Responsibilities
Lead IT SOX Compliance: Drive the end-to-end IT SOX program, including risk assessment, scoping, and the evaluation of IT General Controls (ITGCs) and IT Application Controls (ITACs) across the company’s tech stack
Strategic Risk Advisory: Partner with IT and Engineering teams to provide proactive guidance on control design for new system implementations, cloud migrations, and product launches
External Audit Management: Act as the primary point of contact for external auditors, ensuring seamless coordination of testing and timely remediation of identified deficiencies
Audit Execution: Plan and execute technical audits focused on high-risk areas including Cloud Security (AWS/GCP), Identity & Access Management (IAM), SDLC, and Data Privacy
Process Automation: Drive efficiencies by leveraging data analytics and automation tools to transition from traditional point-in-time testing to continuous monitoring
Remediation Oversight: Collaborate with process owners to develop robust remediation plans for control gaps, ensuring root causes are addressed and validated
Executive Reporting: Prepare high-quality audit reports and presentations for senior leadership and the Audit Committee, translating technical risks into business impact
Team Leadership: Manage co-sourced providers, fostering a culture of technical excellence and professional growth
Qualification
Required
Bachelor's degree in Management Information Systems (MIS), Computer Science, Accounting, or Finance
CISA (Certified Information Systems Auditor) or CIA (Certified Internal Auditor) is required
8+ years of experience in IT Audit or IT Risk Management, with at least 3 years in a management role
Experience at a Big 4 accounting firm in their IT Risk/Advisory practice is required
Proven experience operating within a public company in the Tech industry, with a deep understanding of cloud-native environments
Strong understanding of COSO, COBIT, and NIST frameworks, and the ability to audit complex SDLC/Agile processes
Hands-on experience auditing AWS or Azure environments
Experience with NetSuite (or similar ERP), Salesforce, and Workday
Proficiency with data analytics and GRC tools (e.g., ThoughtSpot, Alteryx, Tableau, AuditBoard, or Workiva)
Deep familiarity with modern CI/CD pipelines and automated deployment controls
Proven ability to communicate technical audit findings to non-technical stakeholders clearly and effectively
Preferred
CISSP is a significant plus
Company
Navan
Navan provides travel, expense, and corporate card management to automate manual processes and drive spend visibility.
1001-5000 employees
Funding
Current Stage
Public CompanyTotal Funding
$2.25BKey Investors
Goldman Sachs Bank USACoatueGreenoaks
2025-10-30IPO
2025-04-07Convertible Note
2022-12-08Debt Financing· $400M
Leadership Team
Ariel Cohen
CEO and Co-Founder
Carlos Avelar
Account Executive
Recent News
2026-01-08
2026-01-07
PhocusWire
2026-01-03
Company data provided by crunchbase