Lambdaでは、ITシステムおよび統制内部監査リードを募集しています。ITGC、IT自動化統制、SOXコンプライアンスの分野で10年以上の経験を持つ専門家を求めています。主な業務は、SOXテストの計画・実行、ITガバナンスの強化、ステークホルダーとの連携です。CISAまたはCISSP資格保持者を優遇し、週4日のサンノゼまたはサンフランシスコオフィスへの出社が必須です。AIクラウドインフラの統制環境を構築するリーダーシップのある方を歓迎します。
Lambda, The Superintelligence Cloud, is a leader in AI cloud infrastructure serving tens of thousands of customers. Our customers range from AI researchers to enterprises and hyperscalers. Lambda's mission is to make compute as ubiquitous as electricity and give everyone the power of superintelligence. One person, one GPU.
If you'd like to build the world's best AI cloud, join us.
*Note: This position requires presence in our San Jose or San Francisco office location 4 days per week; Lambda’s designated work from home day is currently Tuesday.
We are seeking an experienced Internal Audit Lead – IT Systems and Controls to join our Internal Audit function, reporting directly to the Head of Internal Audit. This role will take ownership of SOX IT controls testing and assurance activities, with a strong emphasis on IT General Controls (ITGCs), IT Automated Controls, and Key Report testing. In addition, the role will contribute to broader IT and data-focused internal audit projects and advisory initiatives, driving value-added insights and strengthening the overall governance and internal controls environment. This is a leadership level role that combines hands-on testing and evaluation with leadership, oversight, and stakeholder engagement.
SOX IT Controls & Assurance
Lead the planning, execution, and oversight of SOX testing for IT General Controls (ITGCs), IT Automated Controls, and Key Reports
Assist in the annual IT SOX scoping and risk assessment process in alignment with the overall ICFR and SOX program.
Conduct and lead walkthroughs and design/effectiveness testing of IT controls across homegrown and third-party systems
Coordinate evidence collection, manage remediation efforts, and ensure timely closure of audit gaps.
Oversee the work of co-sourced as well as internal team members and review their work to ensure high-quality, consistent results.
Identify control deficiencies and work with management to design effective remediation approaches and measures.
Monitor changes to business processes and apply independent judgement to evaluate the potential impact to the control environment and recommend necessary improvements. Present the impact of the changes to the Head of Internal audit and other stakeholders prior to implementation.
Manage and update all ICFR / SOX 404 documentation as required including COSO framework mapping, process and control narratives/flowcharts, risk and controls matrix, and testing approach.
Apply professional skepticism and subject matter expertise to independently evaluate and conclude on control deficiencies and develop the necessary remediation actions and monitor their implementation in due time.
IT & Data Assurance Projects
Lead and deliver internal audit projects focused on IT, data governance, and emerging technology risks with a primary focus on internal controls for financial reporting and SOX.
Provide advisory services to technology and business leaders on IT risk management, control optimization, and compliance matters.
Evaluate data integrity, system development practices, access management, and change management processes.
Work closely with engineering, and IT teams to design and implement effective and scalable IT controls.
Control Evaluation & Remediation
Identify, assess, and document control deficiencies, including evaluation of severity and impact.
Work with cross functional leadership and process owners to develop, track, and validate timely remediation plans.
Recommend process improvements and efficiency opportunities while maintaining control effectiveness.
Stakeholder Collaboration
Act as the key liaison with IT, Engineering, Security, finance, and business system teams for IT SOX and assurance initiatives.
Partner with external auditors to coordinate IT SOX testing approaches and reliance strategies.
Provide training and guidance to IT and business stakeholders on IT control requirements and best practices.
Reporting & Communication
Prepare reports and presentations summarizing IT SOX results, audit findings, and remediation progress for the Head of Internal Audit and Audit Committee.
Communicate complex IT control issues in a clear, business-oriented manner to senior management and stakeholders.
Monitor industry and regulatory developments, advising leadership on emerging IT and data-related risks.
Education & Certification
Bachelor’s degree in Information Systems, Computer Science, Accounting, or related field.
CISA, CISSP, or equivalent certification strongly preferred; CPA or CIA is a plus.
Experience
10+ years of progressive experience in IT audit, IT risk, or IT SOX compliance, with at least 3+ years in a managerial or supervisory level role.
Big Four accounting firm or equivalent experience in Internal or External Audit or IT consulting practice.
Deep expertise in ITGCs, IT Automated Controls, key report testing, and their relevance to ICFR, Internal audit methodology and IIA standards.
Experience auditing or testing both homegrown business systems and third-party SaaS applications.
Familiarity with data governance, system implementation reviews, and cybersecurity risk assessments
Experience of working with audit management tools (e.g., AuditBoard, Archer, Workiva) to manage SOX and IT compliance programs..
Skills & Competencies
Strong analytical and technical skills with the ability to evaluate IT and data risks across complex environments.
Excellent communication and interpersonal skills to effectively engage with both technical and non-technical stakeholders.
Proven ability to lead and review the work of internal teams and co-sourced resources.
Organized, detail-oriented, and able to manage multiple priorities in a dynamic environment.
Experience with data analytics and automated testing tools to enhance SOX testing efficiency and insights.
Exposure to emerging technologies such as cloud computing, cybersecurity, and RPA, and their control implications.
Prior experience working in a fast-growth or global organization, adapting SOX programs to evolving structures and complexity.
Familiarity with cybersecurity frameworks (e.g., NIST, ISO 27001, COBIT) and their application to IT risk management.
Experience with data governance and data integrity reviews, including testing controls over data migration, transformation, and reporting.
Prior involvement in system implementation or upgrade reviews for ERP, financial systems, or homegrown applications.
Exposure to DevOps, agile development, or CI/CD environments, including related ITGC and change management considerations.
Working knowledge of data analytics and automation tools (e.g., SQL, Python, ACL, Power BI) to enhance testing efficiency and assurance insights.
The annual salary range for this position has been set based on market data and other factors. However, a salary higher or lower than this range may be appropriate for a candidate whose qualifications differ meaningfully from those listed in the job description.
Founded in 2012, with 500+ employees, and growing fast
Our investors notably include TWG Global, US Innovative Technology Fund (USIT), Andra Capital, SGW, Andrej Karpathy, ARK Invest, Fincadia Advisors, G Squared, In-Q-Tel (IQT), KHK & Partners, NVIDIA, Pegatron, Supermicro, Wistron, Wiwynn, Gradient Ventures, Mercato Partners, SVB, 1517, and Crescent Cove
We have research papers accepted at top machine learning and graphics conferences, including NeurIPS, ICCV, SIGGRAPH, and TOG
Our values are publicly available: https://lambda.ai/careers
We offer generous cash & equity compensation
Health, dental, and vision coverage for you and your dependents
Wellness and commuter stipends for select roles
401k Plan with 2% company match (USA employees)
Flexible paid time off plan that we all actually use
Lambda is an Equal Opportunity employer. Applicants are considered without regard to race, color, religion, creed, national origin, age, sex, gender, marital status, sexual orientation and identity, genetic information, veteran status, citizenship, or any other factors prohibited by local, state, or federal law.
