Senior Internal Auditor

Get to Know Okta

Okta is The World’s Identity Company. We free everyone to safely use any technology—anywhere, on any device or application. Our Workforce Identity Cloud and Customer Identity Cloud (Auth0) solutions enable secure yet flexible access, authentication, and automation that transforms how people move through the digital world, putting Identity at the heart of business security and growth.

At Okta, we celebrate a variety of perspectives and experiences. We are not looking for someone who checks every single box—we’re looking for lifelong learners and owners who can make us better with their unique experiences, technical acumen, and passion for continuous improvement.

Join our team! We’re building a world where Identity belongs to you.

About the Role

Okta is searching for an experienced, detail-oriented, and high-impact Senior Internal Auditor to join our global Internal Audit team and drive the successful execution of Okta’s global Internal Audit and SOX IT compliance program.

In this role, you will lead and execute IT General Control (ITGC), IT Application Control (ITAC), and Information Produced by Entity (IPE/Key Reports) walkthroughs and testing across Okta’s critical enterprise applications, infrastructure, and cloud environments. You will operate with significant autonomy, collaborate closely with external auditors, mentor and review the work of auditors, and partner with Engineering, Information Security, and Finance stakeholders to safeguard the integrity of internal controls over financial reporting (ICFR).

Key Responsibilities

1. Audit Execution & Testing (ITGC & ITAC)

• Independently lead end-to-end SOX IT walkthroughs and execute design (TOD) and operating effectiveness (TOE) testing in strict alignment with Okta’s Internal Audit and SOX methodology.
• Assess IT General Controls across all primary domains:
• Logical Access & Security: User lifecycle management (provisioning/deprovisioning), privileged access management (PAM), multi-factor authentication (MFA), and segregation of duties (SoD).
• Change Management: Source code repository management, deployment approval gates, testing validation, emergency changes, and CI/CD pipeline controls.
• Computer Operations & Resiliency: Automated batch job scheduling and monitoring, data backup verification, incident/problem management, and disaster recovery.
• Perform rigorous evaluations of automated application controls (ITAC), system-generated reports/queries (IPE), key data integrations, and interface reconciliations.
• Review third-party Service Organization Control reports (SOC 1 / SOC 2 Type II) to evaluate complementary user entity controls (CUECs) and determine impacts on in-scope hosted/SaaS systems.
• Participate and support Internal Audits planned for the year. 

2. Workpaper Quality, Staff Coaching & Methodology

• Prepare self-reviewed, audit-ready workpapers and documentation within Okta's GRC platform  with clear evidence, testing samples, and audit conclusions requiring minimal editorial revision.
• Review staff and associate auditor work products, providing actionable coaching and feedback to elevate overall team quality and audit rigor.
• Actively champion SOX methodology improvements, control standardization, and testing efficiencies across the Internal Audit team.

3. Deficiency Evaluation & Stakeholder Advisory

• Pinpoint systemic root causes of control breakdowns and bridge technical gaps between engineering realities and compliance expectations—moving beyond symptom identification.
• Draft precise, well-contextualized deficiency write-ups and collaborate with control owners (TDI, Security, Engineering, and Finance) to reach alignment on remediation strategies and Compensating Controls.
• Track Management Action Plans (MAPs) and perform remediation testing to validate sustained resolution of identified gaps.
• Support direct audit coordination with external auditors, effectively addressing queries and facilitating seamless walkthroughs and sample validations.

4. Automation & Continuous Improvement

• Identify opportunities to rationalize redundant controls, eliminate manual testing fatigue, and leverage automated system capabilities.
• Assist in incorporating data analytics, scripting, and RPA/bot governance to streamline audit sample extraction, configuration inspections, and continuous control monitoring.

Required Qualifications

• Education: Bachelor’s or Master’s degree in Management Information Systems (MIS), Computer Science, Information Technology, Accounting, Finance, or related STEM/business discipline.
• Experience: 4–6 years of relevant experience in IT audit, SOX compliance, technology risk consulting, or internal controls assurance within a Big Four public accounting firm and/or a publicly traded enterprise (high-growth SaaS / cloud technology company preferred).
• Technical Mastery:
• Deep functional knowledge of SOX 404 requirements, PCAOB standards, COBIT, NIST CSF, and the COSO internal control framework.
• Practical experience testing core enterprise systems, including ERP platforms (e.g., NetSuite, Workday), CRM/Billing systems (Salesforce), Identity & Access Management tools, and cloud environments (AWS, GCP, Azure).
• Demonstrated track record evaluating ITGCs, automated application controls, and complex report/query logics (IPE).
• Deficiency & Root Cause Analysis: Proven capability in assessing control deficiencies, determining financial statement impact/significance, and formulating corrective actions with process owners.
• Communication & Collaboration: Excellent verbal and written English communication skills; demonstrated confidence in facilitating walkthroughs and presenting findings to cross-functional leadership.
• Global Team Player: Self-motivated mindset with the ability to operate independently across distributed time zones (including supporting Pacific Time collaboration when necessary).

Preferred Qualifications

• Professional certification such as CISA (Certified Information Systems Auditor) strongly preferred; CIA, CISSP, CISM, or CPA is an added advantage.
• Direct hands-on experience using modern GRC tools such as Optro.
• Familiarity with database query languages (SQL) or data analytics platforms (Alteryx, Snowflake, Tableau) to automate testing validations.
• Understanding of modern DevOps environments, cloud security posture, and CI/CD release management tools (e.g., GitHub, Jira).

Okta’s Core Leadership Competencies

• Drives Results: Consistently achieves results and meets deliverables with high precision, even under tight SOX filing timelines and shifting priorities.
• Demonstrates Self-Awareness (EQ): Solicits feedback, reflects on outcomes, and proactively adapts communication styles across technical engineering teams and non-technical finance leaders.
• Develops Talent: Passionate about mentoring junior auditors and sharing domain knowledge to foster a high-performance culture.
• Strategic Mindset & Innovation: Looks ahead to emerging compliance challenges (cloud architectures, AI governance, identity-first security) and translates them into proactive internal audit strategies.

#LI_Hybrid

#LI_P18882_3607355