Notion Labs

4 weeks ago

Lead, IT Audit and Technology Risk

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 35 minutes agoStatus: Live

Job Summary

Strategic, technically fluent Lead, IT Audit within the Finance team, owning the IT SOX lifecycle and both IT general/application controls. You’ll design and operate technology controls across cloud infrastructure, security, data flows, and CI/CD, lead operational IT and cybersecurity audits, partner with Engineering/IT/Security/Finance, and drive AI-enabled testing and continuous monitoring in a fast-moving SaaS environment.

Location: San Francisco, New York

Workplace: Hybrid

Employment Type: Full time

Job Function: Finance & Accounting

Seniority: Sr. Manager level

Key Responsibilities

•Own the full IT SOX lifecycle — scoping, risk assessment, documentation, walkthroughs, testing, deficiency evaluation, remediation, and reporting — driving automation and efficiency across IT general controls (ITGCs) and IT application controls (ITACs)
•Design, operate, and continuously improve technology controls spanning user access and segregation of duties, change management, SDLC and CI/CD pipelines, interfaces, data flows, and system-generated reports
•Design and execute value-added operational IT and cybersecurity audits — across cloud infrastructure, security operations, identity and access management, data protection and privacy, disaster recovery and resilience, and vendor and third-party risk
•Serve as a strategic advisor on cross-functional initiatives (product launches, new systems, architecture changes, M&A) and as the primary point of contact for external auditors
•Own IT control deficiencies from identification through sustained remediation while partnering with system owners to build a culture of ownership and accountability
•Champion the adoption of AI and modern tooling — automated control testing, anomaly detection, continuous monitoring, and AI-assisted documentation

Key Requirements

•12+ years of progressive IT audit, IT SOX, or technology risk experience, with a combination of Big 4 and high-growth technology company experience
•Deep, hands-on ownership of IT SOX/ITGC programs, with a strong understanding of PCAOB standards, SEC requirements, and frameworks such as COSO, COBIT, NIST, and ITIL
•Demonstrated experience designing and leading operational IT audits end to end — including annual planning, risk-based scoping, fieldwork, and reporting
•Strong cybersecurity audit experience with working fluency in frameworks and regulations such as NIST CSF, ISO 27001, SOC 2, GDPR, and CCPA
•Software or SaaS industry experience is a must — modern cloud-based technology stacks (AWS, GCP, Azure), software development lifecycles, and complex data flows; with knowledge across cloud security configurations, IAM, change management, DevOps/CI/CD, and enterprise IT operations risks and controls

Experience:12+ yearsSaaSCloudIT auditTechnology riskPCAOBCOSOCOBITNISTITIL

Education:Bachelor's

Skills:CommunicationStakeholder managementLeadershipAnalytical thinking

Certifications:CISACISSPCISMCIACPA

Tech Stack:AWSGCPAzureCI/CDDevOpsITGCITILCOSOCOBITNISTSOC 2GDPRCCPASaaSCloud security

Company Brief

Notion Labs

Notion builds a customizable all-in-one workspace for notes, docs, databases, and collaboration, now adding AI-powered features and enterprise capabilities to serve teams and organizations worldwide.

Industry: Enterprise Software

Company Size: Large (251 to 1,000 employees)

Revenue: USD 500M to 1B

Growth: Scaleup

Valuation: Unicorn (USD 1B+)

Funding: Series C

Headquarters: San Francisco, United States

Founded: 2016

Glassdoor: 4.5

Website LinkedIn Glassdoor

Loading job details...

Preparing the role view and application actions.

Notion Labs

4 weeks ago

Lead, IT Audit and Technology Risk

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 35 minutes agoStatus: Live

Job Summary

Location: San Francisco, New York

Workplace: Hybrid

Employment Type: Full time

Job Function: Finance & Accounting

Seniority: Sr. Manager level

Key Responsibilities

•Own the full IT SOX lifecycle — scoping, risk assessment, documentation, walkthroughs, testing, deficiency evaluation, remediation, and reporting — driving automation and efficiency across IT general controls (ITGCs) and IT application controls (ITACs)
•Design, operate, and continuously improve technology controls spanning user access and segregation of duties, change management, SDLC and CI/CD pipelines, interfaces, data flows, and system-generated reports
•Design and execute value-added operational IT and cybersecurity audits — across cloud infrastructure, security operations, identity and access management, data protection and privacy, disaster recovery and resilience, and vendor and third-party risk
•Serve as a strategic advisor on cross-functional initiatives (product launches, new systems, architecture changes, M&A) and as the primary point of contact for external auditors
•Own IT control deficiencies from identification through sustained remediation while partnering with system owners to build a culture of ownership and accountability
•Champion the adoption of AI and modern tooling — automated control testing, anomaly detection, continuous monitoring, and AI-assisted documentation

Key Requirements

•12+ years of progressive IT audit, IT SOX, or technology risk experience, with a combination of Big 4 and high-growth technology company experience
•Deep, hands-on ownership of IT SOX/ITGC programs, with a strong understanding of PCAOB standards, SEC requirements, and frameworks such as COSO, COBIT, NIST, and ITIL
•Demonstrated experience designing and leading operational IT audits end to end — including annual planning, risk-based scoping, fieldwork, and reporting
•Strong cybersecurity audit experience with working fluency in frameworks and regulations such as NIST CSF, ISO 27001, SOC 2, GDPR, and CCPA
•Software or SaaS industry experience is a must — modern cloud-based technology stacks (AWS, GCP, Azure), software development lifecycles, and complex data flows; with knowledge across cloud security configurations, IAM, change management, DevOps/CI/CD, and enterprise IT operations risks and controls

Experience:12+ yearsSaaSCloudIT auditTechnology riskPCAOBCOSOCOBITNISTITIL

Education:Bachelor's

Skills:CommunicationStakeholder managementLeadershipAnalytical thinking

Certifications:CISACISSPCISMCIACPA

Tech Stack:AWSGCPAzureCI/CDDevOpsITGCITILCOSOCOBITNISTSOC 2GDPRCCPASaaSCloud security

Company Brief

Notion Labs

Notion builds a customizable all-in-one workspace for notes, docs, databases, and collaboration, now adding AI-powered features and enterprise capabilities to serve teams and organizations worldwide.

Industry: Enterprise Software

Company Size: Large (251 to 1,000 employees)

Revenue: USD 500M to 1B

Growth: Scaleup

Valuation: Unicorn (USD 1B+)

Funding: Series C

Headquarters: San Francisco, United States

Founded: 2016

Glassdoor: 4.5

Website LinkedIn Glassdoor