Manager of Internal Audit IT

About Us

At Udemy, we’re on a mission to transform lives through the power of learning. We’re a leading global learning company and one of the world’s largest education platforms, with more than 67 million learners. Our goal is to provide flexible, effective skill development to empower organizations and individuals.

Talented people are everywhere, and the right opportunity can be hard to come by. That’s why we’re focused on revolutionizing learning, using our skills and expertise to help others develop theirs and reach their full potential. Individually, we bring our unique perspective to reimagine the way we share knowledge. Together, we can improve lives by making learning more accessible for our learners, our instructors, and businesses around the world.

This hybrid position requires two days per week in our San Francisco office.

About You

You thrive in a high-growth company and are keen to roll up your sleeves and take full ownership. You really enjoy bringing structure to systems and processes. You love to take something new and bring people together to ensure we put the right processes in place to support the business. You have strong organizational, communication, documentation, and project management skills and can balance competing priorities. You take initiative and can work in a dynamic environment across functions and geographies. You are confident, energetic, demonstrate good judgment and can influence outcomes globally. You enjoy having a variety of projects and are comfortable managing multiple workstreams. You have a talent for bringing structure, understanding and clarity from an internal audit and control perspective. You want to come to a team that wants to succeed, enjoy what we do, and appreciate that the other people on the team want the same.

About The Role

Udemy is seeking a Manager, IT Internal Audit reporting to the Senior Director, Internal Audit. You will be a key member of a growing team and serve as the IT Internal Audit lead and subject matter expert for IT/PDE as Udemy scales its control environment. You will oversee the execution of the SOX design and effectiveness testing for the IT environment as well as help scope and execute Internal Audits. You will be a go to person for internal controls questions and considerations for new processes and system implementations supporting Accounting, IT and Engineering teams. 

What You’ll Be Doing

• Lead the project management and testing over IT Controls and Internal Audit projects.
• Perform control testing and workpaper documentation as well as supervise, review, and coach other team members on related technical work.
• Support the SOX 404 risk assessment and scoping processes by identifying significant and critical systems / processes and ensure adequate scope and testing.
• Ensure appropriateness of internal control documentation for IT processes, including planning documents, narratives, process maps, walkthroughs, and tests of controls and develop and refine ITGC policies and procedures including best practice templates.
• Build and maintain close working relationships with all major functional areas as well as external auditors, ensuring a holistic understanding of key risks and processes of the organization.
• Design and perform testing for IT General Controls, application controls and key reports through assessment, walkthroughs, and audits to ensure operational effectiveness including the review of third-party vendor attestation and audit reports, including the mapping of complementary user entity controls.
• Stay up to date on changes to systems and applications and provide guidance on related controls as well as monitor the control environment and validate that controls are operational in-line with established policies and procedures, and controls methodology.
• Communicate identified findings and propose recommendations to management; track the remediation and closure of findings.

What You’ll Have

• 5+ years of experience planning and executing IT SOX, technology/security and other compliance audits with focus on change management, access security, interface/integrations and major system developments (SDLC). Big Four public accounting or similar consulting firm experience is a plus
• A BA/BS degree in Information Technology or Management Information Systems or related field is required.
• A CIA, CISA, CISSP or other relevant professional certification is a plus. 
• A deep understanding of COSO, COBIT, Sarbanes Oxley Act, and PCAOB auditing standards and experience in the use of auditing and risk assessment frameworks. 
• Experience with ISO 27001/27002 and performing related Internal Audit engagements.  
• Strong project management and problem-solving skills in a fast-paced environment.
• Strong understanding of IT controls and automated business processes and the risks surrounding those in a SaaS and/or online platform/marketplace environments.
• Strong understanding of risks and controls from both compliance and process enhancement perspectives, including identifying key business risks and controls in ERP applications and cloud systems like NetSuite, Salesforce, Workday, AWS, GitHub.

We understand that not everyone will match each of the above qualifications. However, we also realize that everyone has unique experiences that can add value to our company. Even if you think your background might not perfectly align, we’d love to hear from you!

Life at Udemy 

We aspire to be as vibrant and dynamic as the communities we serve, as inquisitive as those who use our platform, and as revolutionary as the future we strive to open for everyone. Here are some of the things we love about life at Udemy:

• We’re invested in creating an inclusive environment that welcomes a diverse range of backgrounds and experiences. From creating employee resource groups, ensuring we’re a Fair Pay Workplace, and building a flexible work culture, our belonging, equity, diversity, and inclusion (BEDI) initiatives always put our people first. We want you to be able to bring your authentic self to work because when we all do, we’re better for it.
• Learning is what we do – inside and out. Our Learning & Development team is second to none, helping ensure your journey is one of continuous progression. You’ll also have unlimited access to Udemy courses, monthly UDays (meeting-free professional development days), and a generous annual professional development stipend.
• Our reason to exist is to revolutionize learning – that calls for taking risks and learning from failures. Whether it’s our hackathons (a company-wide effort to envision new possibilities for our product) or sharing our prototypes, we see experimentation as a crucial step on the path to success.
• We’re committed to creating world-class employee experiences and are proud of the recognition of this by Great Place to Work. 

Of course, the best thing about being part of Udemy is knowing your work makes a difference for people and organizations around the world. You’ve got the skills; why not use them to help others develop theirs?

At Udemy, we value diversity and inclusion and consider qualified applicants without regard to race, color, religion, sex, national origin, ancestry, age, genetic information, sexual orientation, gender identity, marital or family status, veteran status, medical condition, or disability. We will consider for employment qualified applicants with arrest and conviction records.

Our Benefits Start With U

Our benefits package at Udemy “starts with U” and is grounded in mission-driven benefits that intentionally align with our core values. Here’s a sneak peek at just a few highlighted benefits if you’re a full-time Udemate based in the United States:

• Core Benefits: Comprehensive medical, dental, vision, life/AD&D, and disability coverage
• HSA/FSA/Commuter: Pre-tax savings/spending plans, including HSA employer contributions
• Transgender Benefits: Expanded medical coverage for gender-affirming care
• Parental Benefits: Financial assistance for fertility (including egg-freezing), adoption, and surrogacy expenses; twelve weeks of paid family bonding for birth, surrogacy, adoption, and foster placement (plus up to six to ten weeks of paid disability leave for birthing parents) as well as a two-week “ease-back” program that enables parents to return part-time at full pay
• Whole U: Fully paid memberships for meditation/mindfulness, therapy/coaching visits, financial planning, fertility and family building, maternity and newborn care, parenting and pediatrics, menopause care, breastmilk shipping, and caregiving support
• Learning: Free access to Udemy and Udemy Business plus a yearly stipend to spend on professional development
• Retirement: Pre-tax and Roth 401(k) plan with an employer contribution
• Charitable Giving: Corporate charitable match for eligible nonprofits and charities
• Vacation: Flexible vacation for salaried Udemates and fifteen days per year for hourly
• Holidays: Twelve paid holidays throughout the year

Information regarding data privacy is available within the Udemy Careers Privacy Notice.

At Udemy, we strive to be transparent around compensation. Actual compensation for this role is based on several factors, including but not limited to job-related skills, qualifications, experience, and specific work location due to differences in the cost of labor. In addition to a base salary, this role is also eligible for benefits and equity.