Senior Internal Auditor

Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk. Get to Know Okta Okta is The World’s Identity Company. We free everyone to safely use any technology—anywhere, on any device or application. Our Workforce Identity Cloud and Customer Identity Cloud (Auth0) solutions enable secure yet flexible access, authentication, and automation that transforms how people move through the digital world, putting Identity at the heart of business security and growth. At Okta, we celebrate a variety of perspectives and experiences. We are not looking for someone who checks every single box—we’re looking for lifelong learners and owners who can make us better with their unique experiences, technical acumen, and passion for continuous improvement. Join our team! We’re building a world where Identity belongs to you. About the Role Okta is searching for an experienced, detail-oriented, and high-impact Senior Internal Auditor to join our global Internal Audit team and drive the successful execution of Okta’s global Internal Audit and SOX IT compliance program. In this role, you will lead and execute IT General Control (ITGC), IT Application Control (ITAC), and Information Produced by Entity (IPE/Key Reports) walkthroughs and testing across Okta’s critical enterprise applications, infrastructure, and cloud environments. You will operate with significant autonomy, collaborate closely with external auditors, mentor and review the work of auditors, and partner with Engineering, Information Security, and Finance stakeholders to safeguard the integrity of internal controls over financial reporting (ICFR). Key Responsibilities 1. Audit Execution & Testing (ITGC & ITAC) • Independently lead end-to-end SOX IT walkthroughs and execute design (TOD) and operating effectiveness (TOE) testing in strict alignment with Okta’s Internal Audit and SOX methodology. • Assess IT General Controls across all primary domains: • Logical Access & Security: User lifecycle management (provisioning/deprovisioning), privileged access management (PAM), multi-factor authentication (MFA), and segregation of duties (SoD). • Change Management: Source code repository management, deployment approval gates, testing validation, emergency changes, and CI/CD pipeline controls. • Computer Operations & Resiliency: Automated batch job scheduling and monitoring, data backup verification, incident/problem management, and disaster recovery. • Perform rigorous evaluations of automated application controls (ITAC), system-generated reports/queries (IPE), key data integrations, and interface reconciliations. • Review third-party Service Organization Control reports (SOC 1 / SOC 2 Type II) to evaluate complementary user entity controls (CUECs) and determine impacts on in-scope hosted/SaaS systems. • Participate and support Internal Audits planned for the year. 2. Workpaper Quality, Staff Coaching & Methodology • Prepare self-reviewed, audit-ready workpapers and documentation within Okta's GRC platform with clear evidence, testing samples, and audit conclusions requiring minimal editorial revision. • Review staff and associate auditor work products, providing actionable coaching and feedback to elevate overall team quality and audit rigor. • Actively champion SOX methodology improvements, control standardization, and testing efficiencies across the Internal Audit team. 3. Deficiency Evaluation & Stakeholder Advisory • Pinpoint systemic root causes of control breakdowns and bridge technical gaps between engineering realities and compliance expectations—moving beyond symptom identification. • Draft precise, well-contextualized deficiency write-ups and collaborate with control owners (TDI, Security, Engineering, and Finance) to reach alignment on remediation strategies and Compensating Controls. • Track Management Action Plans (MAPs) and perform remediation testing to validate sustained resolution of identified gaps. • Support direct audit coordination with external auditors, effectively addressing queries and facilitating seamless walkthroughs and sample validations. 4. Automation & Continuous Improvement • Identify opportunities to rationalize redundant controls, eliminate manual testing fatigue, and leverage automated system capabilities. • Assist in incorporating data analytics, scripting, and RPA/bot governance to streamline audit sample extraction, configuration inspections, and continuous control monitoring. Required Qualifications • Education: Bachelor’s or Master’s degree in Management Information Systems (MIS), Computer Science, Information Technology, Accounting, Finance, or related STEM/business discipline. • Experience: 4–6 years of relevant experience in IT audit, SOX compliance, technology risk consulting, or internal controls assurance within a Big Four public accounting firm and/or a publicly traded enterprise (high-growth SaaS / cloud technology company preferred). • Technical Mastery: • Deep functional knowledge of SOX 404 requirements, PCAOB standards, COBIT, NIST CSF, and the COSO internal control framework. • Practical experience testing core enterprise systems, including ERP platforms (e.g., NetSuite, Workday), CRM/Billing systems (Salesforce), Identity & Access Management tools, and cloud environments (AWS, GCP, Azure). • Demonstrated track record evaluating ITGCs, automated application controls, and complex report/query logics (IPE). • Deficiency & Root Cause Analysis: Proven capability in assessing control deficiencies, determining financial