We are working to build innovative products and technologies that support our mission of offering honest financial products to improve lives! We are looking for an experienced Internal Audit Lead, Technology to contribute to the ongoing development of the Internal Audit (IA) function and to Affirm’s efforts to achieve its business objectives. The Internal Audit Lead, Technology will report to the Director, Technology Audit and will work alongside all members of the Internal Audit team in conducting audits and reviews to impact and influence positive business outcomes!

What You’ll Do

• Collaborate with the Vertical Leads, Business Stakeholders and IA Partners to assist in performing the various stages of an Internal Audit project, including planning, fieldwork, and reporting.
• Support Affirms Annual SOX program by assisting with the annual risk assessment, coordinating with External and Internal Audit partners to assist with walkthroughs, documentation gathering, control testing and issue remediation.
• Complete specific areas of an audit project using standard audit methodology to evaluate risk, determine control objectives, and verify the extent to which Affirm’s process, controls, and systems are operating as intended.
• Assist and be an individual contributor for IA project deliverables, including scoping documentation, narratives, flowcharts, testing workpapers, etc. for internal audit projects.
• Prepare and complete detailed audit programs for technology audits, security reviews, and business integrated audits, where IT audit support may be required.
• Support audit issue remediation validation and closure procedures.
• Collaborate with management and staff to acquire an understanding of relevant risks, controls, and processes.
• Inform and communicate Internal Audit management of project status, potential roadblocks and results.
• Operate in an ambiguous and fast-paced environment.

What We Look For

• At least 3-5 years of professional experience in internal or external technology audit.
• A Bachelor’s degree from an accredited college or university, preferably in a relevant field of study (i.e., Accounting Information Systems, Management Information Systems, Computer Science, Accounting, Finance, etc.).
• Preferred certification in one of the following: Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), Certification Information Security Manager (CISM), Certified Risk and Information Systems Controls (CRISC), etc.
• Strong understanding of IT SOX processes and controls. ITGCs, ITAC and Key Report testing experience required.
• Ability to understand sophisticated processes and summarize and document in a narrative and workflow format.
• Strong project/task management and prioritization skills.
• Strong written and verbal communication, presentation, and technical writing skills.
• Technical experience in one of more of the following disciplines: information security, data warehouses, python, SQL, DevOps or AWS is a plus.
• Experience in FinTech, Financial Services, Retail, SaaS or technology-related companies is highly preferred.