Affirm is recruiting an Internal Controls Director to support the company's compliance over financial reporting. As an Internal Controls Director, you will be responsible for evaluating technical aspects of systems, databases, processes and controls; identifying and mitigating IT control gaps and partnering with business and engineering teams on remediation items. You will also coordinate with external auditors and process owners to enable completion of testing and provide support by developing relationships with leaders throughout the organization to monitor and improve internal controls, processes, and drive operating efficiencies. In addition, part of this role will include evaluating new systems and products and supporting business partners where necessary to ensure their areas are operationally efficient and compliant with regulatory frameworks. This person will report into the Internal Controls function and partner extensively with the Finance, IT and Information Security teams at Affirm.

What you'll do

• Plan, lead and execute the company's IT SOX program including performing risk assessments, leading walkthroughs and overseeing tests of design and operational effectiveness of IT controls
• Assess new products, systems, databases or changes to existing processes to identify financial and operational risks before launch, providing recommendations for improvement
• Participate in annual and ongoing SOX scoping to identify any changes to the systems, applications, and automated controls considered to be in-scope for the current fiscal year
• Coordinate SOX program testing IT controls with co-sourced internal audit IT team members, external audit IT team members, control owners, managers and executive management
• Evaluate IT control deficiencies for impact and perform root cause analysis to determine appropriate management actions. Monitor management's remediation efforts to closure, including review of supporting evidence
• Lead benchmarking and other initiatives to improve controls, make processes more efficient, effective, and/or reduce cycle time for SOX IT compliance

What we look for

• BA/BS (or equivalent experience) in Information Systems, Accounting, or a related field
• CISA certified
• 8+ years of relevant IT audit and SOX experience, technology industry experience preferred
• Experience managing an IT SOX program along with strong IT process, risk and control knowledge beyond SOX
• Adept at assessing complex IT and business processes environments to identify potential IT, financial, operational, and compliance risks
• Experience assessing controls in a SaaS environment, DevOps processes, and home-grown systems a plus
• Solid knowledge and experience of IT Audit controls across domains such as access, change management, operations, application controls and reports testing
• Basic knowledge of business processes and supporting IT controls
• Excellent written and verbal communication skills
• Ability to work efficiently with minimal oversight/direction as well as part of multiple project teams
• Comfortable in a fast-paced, ever-changing, rapid-growth, fun environment with multiple projects and tasks
• Possess high ethical standards, level of commitment and ability to cope with complexity and change
• Responsible, flexible and a highly motivated self-starter