Staff Technical Program Manager, IT Audit & Governance
MongoDB · New York City; Palo Alto
About this role
**Staff Technical Program Manager, IT Audit & Governance** We’re looking for a senior, hands-on leader to own IT audit and governance across our applications, infrastructure, and systems—ensuring we’re audit-ready every day for **SOX ITGCs/ITACs** and broader technology audit obligations (e.g., **SOC reports, ISO, security, and regulatory audits**). This role is about **accountability and execution**. You’ll partner with cross-functional IT leaders across Infrastructure, Engineering, Security, Cloud, Enterprise Applications, and Business Systems to ensure controls are **owned, operated, evidenced, and remediated on time**. You’ll also serve as the primary IT liaison to **Internal Audit, Finance/SOX PMO, and external auditors**, operating independently and influencing without authority. **Location:** Hybrid — candidates based in **Palo Alto** or **New York City**. --- ## What You’ll Do ### Own audit and governance across all IT - Own the audit and governance program across IT applications, infrastructure, cloud platforms, and supporting systems - Maintain a complete inventory of systems, owners, and applicable audit/compliance obligations (**SOX, SOC 1/SOC 2, ISO 27001**, and other regulatory/customer requirements) - Build and run an IT audit calendar coordinating SOX, internal audit, external audit, and compliance activities to reduce duplicate asks and audit fatigue - Establish governance standards, policies, and control frameworks consistent across IT ### Drive accountability and execution with IT leaders - Partner with cross-functional IT leaders to assign clear control and remediation ownership, with deadlines and escalation paths - Run regular governance forums and control health reviews (status, risks, overdue items) - Hold teams accountable for timely control execution, evidence quality, and issue closure—escalating early when commitments slip - Translate audit/compliance requirements into practical work engineering and infrastructure teams can adopt without slowing delivery ### Own ITGC and ITAC compliance - Own the end-to-end **SOX IT program**: scoping inputs, control design, ownership, evidence, readiness testing, and issue management - Maintain the **ITGC framework** (access management, change management, IT operations, SDLC) across in-scope applications, databases, operating systems, and cloud infrastructure - Own **ITAC strategy and coverage** with Finance and business-system owners (automated controls, configurations, interfaces, calculations, approval workflows) - Own **IPE/report validation**, ITAC baselines, and **segregation of duties (SoD)** across ERP and key financial applications ### Design, operate, and strengthen controls - Design controls engineered into IT workflows (ticketing, CI/CD, IAM, CMDB) rather than layered on manually - Run readiness and self-assessment testing ahead of Internal Audit and external auditor testing - Rationalize overlapping controls across frameworks so one control/evidence can satisfy multiple requirements - Drive automation and continuous control monitoring to reduce manual effort and audit burden - Manage **SOC 1/SOC 2** report reviews, **CUECs**, and third-party/vendor control dependencies ### Drive remediation and issue management - Own the issue lifecycle across IT (identification → root cause → remediation plan → validation → closure) - Prepare management’s response to audit findings and provide IT perspective on deficiency severity with Finance, Legal, and Internal Aud
Listing freshness
CronJobs last confirmed this listing 1h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.