IT Audit Manager

This is a full time role that can be held from one of our US hubs or remotely in the United States.#### What youll do at Figma: * Execute the IT SOX compliance program: ITGC and ITAC testing, deficiency management, remediation tracking, and SOX documentation. Coordinate with external auditors and co-sourced resources throughout the audit cycle. * Provide technical support in the assessment, design, and implementation of IT General Controls and IT Application Controls in collaboration with GRC and IT management. Participate in system upgrades and implementations to ensure controls over financial reporting are adequately identified and addressed. * Lead IT risk conversations with management and contribute to the IT risk register. Support the buildout of Figma's IT risk management program, including risk identification methodology, assessment frameworks, and leadership reporting. * Contribute to risk updates for the Audit Committee and senior leadership as it relates to the IT risk landscape, including emerging technology risks such as cloud, SaaS, and AI. * Develop a risk-based operational audit plan and implement audits across IT and business process areas, including where no prior year workpapers exist. Issue findings with risk ratings and actionable recommendations; track remediation to closure. * Build audit programs from scratch, prepare clear and concise audit reports, and present findings and recommendations to senior leaders and cross-functional partners.#### We'd love to hear from you if you have: * 6+ years in IT audit, IT risk management, or a combination thereof * IT SOX compliance experience with hands-on ownership of ITGCs, ITACs, and Segregation of Duties * Experience performing operational or integrated audits, including in environments without established playbooks * Knowledge of PCAOB/SEC requirements and audit frameworks, including CISA, CIA, or CISM certifications * Ability to collaborate across Internal Audit and cross-functional teams (GRC, IT, Finance, Legal, Business Systems)#### While not required, its an added plus if you also have: * Experience supporting the development of a risk management program * SaaS or fast-paced tech company experience * Familiarity with GRC tools (AuditBoard, Workiva, ServiceNow GRC, or similar) * Experience with data analytics tools (ACL, IDEA, or similar) for audit processes * Cloud security knowledge and audit experienceAt Figma, one of our values is Grow as you go. We believe in hiring smart, curious people who are excited to learn and develop their skills. If youre excited about this role but your past experience doesnt align perfectly with the points outlined in the job description, we encourage you to apply anyways. You may be just the right candidate for this or other roles.At Figma we celebrate and support our differences. We know employing a team rich in diverse thoughts, experiences, and opinions allows our employees, our product and our community to flourish. Figma is an equal opportunity workplace - we are dedicated to equal employment opportunities regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity/expression, veteran status, or any other characteristic protected by law. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements.