It Internal Controls Jobs

Who we are About Stripe Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world’s largest enterprises to the most ambitious startups—use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone’s reach while doing the most important work of your career. Stripe builds the most powerful and flexible tools for running an internet business. We handle hundreds of billions of dollars each year and enable millions of users around the world to scale faster and more efficiently by building their businesses on Stripe. To further this important mission, Stripe is building a world class Internal Audit (IA) team. Our IA mission is to make the business better as it grows. We are consumed with the goal of being agile with the business, powered by technology and an accelerator to the speed of controls integration and compliance adoption. About the team Our IA team is responsible for providing objective feedback and insights across the company in relation to the design and effectiveness of Stripe’s business processes, its compliance with laws and regulations and its risk management framework. Unique in our purpose is a cross-functional mandate that invites viewing through a wide lens and collaborating across the business. To enable this engagement, we must build and scale in a rapid-growth, high-volume environment. This is a unique opportunity to join a growing Data Analytics team within audit and work on providing data driven insights across the IA lifecycle. The DA Lead will support Data Analytics and audit fieldwork in execution of the approved Global Audit Plan. They will help develop embedded audit analytics as part of audit planning, fieldwork, and reporting through the execution of data analytics test steps.

Our mission and customers: We are creating the freedom for SMEs to succeed by delivering Europe's leading finance workspace with banking at its core, augmented by financial tools. We are proud to be rated 4.8 on Trustpilot, based on 55,000+ reviews. Our culture puts customer satisfaction at the core of what we do, as proven by our Net Promoter Score of 75 (more about our culture here). Our journey: Founded in 2017 by Alexandre and Steve, Qonto has grown to 1,600+ Qontoers serving over 600,000+ customers across 8 European countries. We have been profitable since 2023, and we are just getting started. Our beliefs: We hire for skills and potential. With 80+ nationalities, 45% women, of which 56% of women in our leadership team, diversity isn't a program; It's who we are. We've built a discrimination-free hiring process because the best teams are built on merit. AI at Qonto: AI is deeply embedded in how we work (here) - Every Qontoer gets unlimited access to the best AI tools. We want people who experiment without waiting for permission, push AI beyond the obvious, know when to trust it, and when to question it. ------------------------------------------------------------------------------------------------------ Join us as Internal Control Apprentice (Operations) to help keep Qonto's operational processes accurate, compliant, and audit-ready as we scale across Europe. You'll run real, autonomous controls each month, analyzing processes, writing sharp recommendations, and working with different teams under the guidance of Ismaël Tchala, our Lead Internal Control. Ismaël and his team of 6 internal controllers focus on maintaining the operational mastery and efficiency of Qonto's Operations department, ensuring accurate reporting, and strengthening compliance with laws and internal policies. ➡️ What you'll do Run multiple controls per month on operational processes: You'll own each control end-to-end, from analysis to final report, with a strong focus on France across a

About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role We are looking for a Director, IT SOX to join the Internal Audit team at Anthropic. In this role, you will be a hands-on technical contributor and key executor of our IT SOX compliance program, with deep focus on our IT General Controls, IT Application Controls, and system risk assessments. This role reports to the Head of IT SOX and is well-suited for someone who is comfortable with ambiguity, thrives in a high-pace environment, and enjoys solving problems that don't yet have industry-standard answers. This is a high-impact opportunity to collaborate with first and second lines of defense to help establish a control environment suitable for an AI-first company! You will act as a trusted advisor to Engineering, GRC, Security and Finance teams on the technology controls adapted to a fast growing and rapidly changing organization. You'll bring technical depth, a bias toward automation, and the ability to partner effectively with both technical teams and external auditors as the organization experiences scaling to public-company standards. Key responsibilities Advise on the design of a control environment fit for an AI-first company, including controls over highly automated DevOps pipelines and emerging agentic identity models Partner with Engineering, Security, IT, and DevOps teams to assess the design and implementation of scalable and sustainable controls Assess new system implementations and changes Identify automation and tooling opportunities to improve control efficiency and monitoring, and contribute to the development of continuous monitoring capabilities Assist in scoping and planning for annual SOX IT assessment

Who we are About Stripe Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world’s largest enterprises to the most ambitious startups—use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone’s reach while doing the most important work of your career. About the team Stripe's mission depends on the trust of the businesses that run on us. Internal Identity builds the infrastructure that keeps access to Stripe's systems secure: strong authentication and authorization that stays out of people's way. We decide how every engineer, service, and AI agent at Stripe gets access to what it needs, and nothing more. We're building the next generation of authorization at Stripe. It reasons about how people, services, and resources relate to each other, and it enforces policy consistently everywhere. We’re actively making the secure path the easiest one for every team at Stripe. The technical challenges we’re solving include building systems with 99.999%+ availability, expanding authorization controls to model agents as first-class identities, and making authorization policy authorship more approachable. Engineers here own big problems end to end and work closely with teams across the company. Internal Identity is largely a distributed team with a small presence in-person in Seattle. What you'll do We’re looking for an engineer who is passionate about addressing tough problems in the authorization space. This role is critical, not only for Stripe, but for the future of the commercial internet. Responsibilities Build and maintain reliable, performant and scalable authorization infrastructure (e.g. libraries, frameworks, services). Build comprehensive understanding of authorization needs of our users (e.g. product teams

About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role Anthropic's Security Governance, Risk, and Compliance (GRC) team is the connective tissue that holds the company accountable to its security and control commitments. We translate regulatory, customer, and voluntary obligations into controls that teams act on, and give leadership a bird's-eye view of how well we're meeting them. We're building toward continuous assurance, to challenge and evidence the performance of controls continuously rather than through periodic audits. As Anthropic scales to meet public-company standards, the Sarbanes-Oxley (SOX) control environment over our technology stack is one of the most consequential things this team owns. As part of Security GRC's technical controls assurance function, you will be the voice on what the IT general controls must achieve to support SOX 404 compliance. In partnership with Internal Audit, you will define control requirements and acceptance criteria for the in-scope engineering systems and infrastructure that underpin financial reporting. You will pair with engineering as they design and implement against those requirements, and validate that what ships actually meets the bar before Internal Audit and our external auditors test it. You are the product owner for control design methodology and continuous control monitoring, initially around ITGCs, but extending into other areas of security and compliance to drive visibility where and when we need it. Key responsibilities Define control requirements and acceptance criteria across the core ITGC domains of logical access, change management, computer operations, and program development for SOX in-scope systems, in

Who We Are Notion is the collaborative AI workspace where teams and agents think together . We're building one place where your knowledge, projects, meetings, and AI tools live side by side, so work is faster, clearer, and less fragmented. Millions of individuals, small teams, and large companies run their work on Notion. Notinos (our employees) are customer zero in bringing this future of work to life. We care about craft, building things that last, and the belief that great work is still fundamentally human. Our goal isn’t to ship the next feature. Each and every team of Notinos is working to set the standard for how humans work together in the AI era. From building a business’s system of record to making and managing AI agents to automating away the busy work, we care deeply about giving our customers more time for their life’s work. About the Role: We are seeking a strategic and technically fluent Lead, IT Audit to join our Finance team reporting to the Head of Internal Audit. This is a broad, high-impact role spanning both IT SOX compliance and operational IT audits. You will help establish and elevate our technology controls program end to end — owning the IT SOX lifecycle, designing the IT general and application controls framework, embedding AI and automation into how we test and monitor controls, and delivering value-added operational IT and cybersecurity audits that strengthen how the company builds and runs its systems. You will partner with leaders across Engineering, Security, IT, Finance, and the business to ensure sound technology controls are built into how the company operates as we scale. This role is ideal for someone who thinks like a builder, not just an auditor — someone who can translate complex control and security requirements into practical, scalable processes in a fast-moving SaaS environment with modern cloud architecture and complex data flows. This role can be based in either San Francisco or New York City. We work from our offices on M

About the Team OpenAI’s Platform and Infrastructure Engineering organization advances the mission of deploying artificial general intelligence (AGI) for the benefit of all by delivering secure, scalable, and resilient technology solutions. Our team builds and maintains robust infrastructure that safeguards OpenAI’s data and systems while ensuring employees are well-equipped and seamlessly connected. By prioritizing security, reliability, and user-centric solutions, we empower OpenAI employees to drive impactful AI research, corporate operations, and product innovation. About the Role As a Software Engineer: Internal Applications, Enterprise, you will build internal products that make technology support and administration safer, faster, and less dependent on manual intervention. You will help reduce reliance on broadly privileged human actions, turn recurring technology problems into paved paths, and build agentic systems that can help resolve tickets end to end. A core part of the role is building the interfaces that bring employees, AI agents, and human responders together in a shared ITSM experience, with the right context, controls, and handoffs at each step. We are seeking engineers who enjoy working across frontend and backend layers on ambiguous, high-leverage enterprise problems. You should bring strong product judgment, solid backend engineering fundamentals, and an interest in building software that changes how technology support, system administration, and agent-assisted operations are delivered. The best fit will care as much about the quality of the operator and employee experience as the correctness of the backend systems behind it. In this role, you will: Build frontend experiences that let employees request help, let agents gather context and take safe actions, and let human responders review, approve, or take over without losing the thread. Reduce reliance on broadly privileged manual actions by replacing them with narrow, auditable, policy-aware aut

Location: New York City or San Francisco - 4 days in office About the Role We are looking for a highly technical Senior Security Engineer who thrives on building security capabilities from the ground up. This role is ideal for someone who enjoys solving complex security challenges through engineering, automation, and AI rather than relying solely on commercial tools. You will help build, scale, and continuously evolve the next generation of security capabilities across our cloud-native SaaS platform, with a strong focus on AI security, automation, and scalable security operations. We are looking for engineers who enjoy solving security problems across multiple domains rather than specializing exclusively in a single area. You will join a highly technical Security Engineering team that values innovation, ownership, and building scalable security solutions. This is a hands-on engineering role for builders, innovators, and problem-solvers who want to create security solutions that operate at scale. What You’ll Do Security Engineering Design, build, and maintain security platforms, services, APIs, automation, and internal tooling. Develop solutions that streamline Cloud vulnerability management, Network Security, Detection engineering, Incident response, access governance, and security operations. Use software engineering principles to build detections-as-code, security workflows, internal platforms, and scalable security services that enable the organization to move faster while remaining secure. Leverage AI extensively to accelerate investigations, automate workflows, improve decision making, and reduce operational overhead. AI & LLM Security Design and implement security controls for AI applications, LLM-powered services, agents, and AI development workflows. Build guardrails and security tooling to identify and mitigate risks such as prompt injection, data leakage, model misuse, excessive permissions, insecure plugins, and unsafe AI interacti

Location Details: India, Remote At GoDaddy the future of work looks different for each team. Some teams work in the office full-time; others have a hybrid arrangement (they work remotely some days and in the office some days) and some work entirely remotely.​ This is a remote position, so you’ll be working remotely from your home. You may occasionally visit a GoDaddy office to meet with your team for events or meetings. Join our Team Do you want to be an Information Security Lead at GoDaddy? GoDaddy’s Security organization is looking for a Cloud Security Engineer. We work out large-scale and cross-company security challenges while ensuring that partnership with the development and operational communities remains front of mind. At GoDaddy, Security Engineers apply their strong hands-on technical skills to craft scalable solutions for multiple problems. You must communicate with GoDaddy Engineering teams, perform security assessments, prioritize security risks, and design. We, as a team, implement high-quality security engineering solutions! What you'll get to do... The Senior Cloud Network Security Engineer will play a crucial role in designing, building, and securing large-scale, distributed cloud environments that support GoDaddy Services. This role operates at the intersection of cloud infrastructure, security architecture, and engineering execution. The successful candidate will collaborate closely with service teams, security leaders, and compliance partners to embed security-by-design principles into cloud services and internal platforms. This position requires advanced technical expertise in cloud-native security controls. It also needs a strong understanding of threat models in hyperscale environments. Additionally, it involves influencing architecture decisions across multiple teams. The role demands hands-on engineering, good judgment in ambiguous situations, and proficiency at translating security requirements into scalable, automated solutions. Bui

Momentum is a respected collection of independent companies, including PMG, Koddi, Further. We serve as a premier global business transformation partner for over 125 of the Fortune 500 brands. With 1,400 global employees and $5B in media spend under management, we foster a fast-growing, values-driven, people-first environment where you can thrive. Our portfolio of companies partners with some of the world’s most iconic and ambitious brands. We combine scalability with a solutions-oriented approach to deliver fast-paced, innovative results for our customers while creating meaningful growth opportunities for our teams. If you are looking for opportunities to grow in your career and are passionate about being at the forefront of data and technology, and driving rapid innovation in the future of commerce, we would love to talk with you about joining Momentum. We believe that a culture of belonging, inclusion, and diversity is key to empowering our team members to thrive both personally and professionally. Living out our values is not just a goal; it's a daily practice! For more information, please visit www.momentum.com . The Opportunity We are hiring a Security GRC & Risk Analyst to own the governance, risk, and compliance execution layer across a holding company and portfolio of businesses. This is a build-oriented role with a defined scope: you will be the internal anchor for our SOC 2 Type II audit, NIST CSF remediation roadmap, security policy library, vendor risk program, and client-facing security questionnaires. You will work directly with the Cybersecurity Manager and a vCISO partner, collaborate with the Data Privacy legal team as a peer on overlapping policy areas, and engage regularly with portfolio company stakeholders. A dedicated internal Data Privacy legal team owns regulatory compliance - GDPR, CCPA, breach notification, and data subject rights. This role owns the technical controls layer: the evidence, the frameworks, the audit

Location: New York City or San Francisco - 4 days in office About the Role We are looking for a highly technical Senior Security Engineer who is passionate about protecting data across modern SaaS, cloud, endpoint, and analytics environments. This role is ideal for someone who enjoys solving complex data security challenges through engineering, automation, and AI rather than relying solely on commercial tools. You will help build, scale, and continuously evolve Sigma’s data security capabilities across SaaS applications, cloud platforms, endpoints, collaboration tools, AI systems, and data warehouses. You will be joining a dynamic and highly technical Security Engineering team at Sigma. This is a hands-on engineering role for builders, innovators, and problem-solvers who want to create scalable security solutions that protect the organization's most critical asset - data. What You'll Do Design, build, and maintain security platforms, services, APIs, automation, and internal tooling that protect Sigma's data across cloud, SaaS, endpoint, and analytics environments. Develop scalable solutions for data discovery, classification, governance, access controls, monitoring, and protection using modern engineering practices and automation. Build and mature capabilities around CASB, DLP, DSPM, SSPM, insider risk, and data access governance to reduce the risk of unauthorized access, sharing, or exposure of sensitive information. Build and maintain DLP controls and tooling across multiple cloud, OS environments and decentralized datasets, implementing and tuning prevention capabilities that protect against sophisticated data security incidents. Drive automation across DLP engineering and operations by leveraging LLMs, agentic AI, and an automation-first mindset to streamline workflows, reduce manual effort, and scale data protection coverage. Design and implement security controls across SaaS applications, collaboration platforms, endpoints, and business-critical

It all started with an idea at Block in 2013. Initially built to take the pain out of peer-to-peer payments, Cash App has gone from a simple product with a single purpose to a dynamic ecosystem, developing unique financial products, including Afterpay/Clearpay, to provide a better way to send, spend, invest, borrow and save to our 50+ million monthly active customers. We want to redefine the world’s relationship with money to make it more relatable, instantly available, and universally accessible. Today, Cash App has thousands of employees working globally across office and remote locations, with a culture geared toward innovation, collaboration and impact. We’ve been a distributed team since day one, and many of our roles can be done remotely from the countries where Cash App operates. No matter the location, we tailor our experience to ensure our employees are creative, productive, and happy. The Role Cash App Investing is seeking a Compliance Officer to lead and mature the compliance program for its FINRA/SEC-regulated investing business. Reporting to the Head of Global Regulated Entities at Block, you will provide senior compliance leadership across broker-dealer obligations, product advisory, regulatory engagement, governance, and team execution. This role will partner closely with Cash App Investing leadership, Product, Engineering, Legal, Risk, Financial Crimes, Operations, and Internal Audit to support responsible growth and strong regulatory outcomes. You Will Lead the Cash App Investing compliance program, including policies, procedures, controls, monitoring, testing, reporting, and governance. Maintain and enhance written supervisory procedures, supervisory controls, escalation routines, and compliance operating processes. Advise Product, Engineering, Operations, Marketing, Legal, and business leaders on investing product development, customer communications, and regulated activities. Oversee core broker-dealer compliance obligations, including communicat

It all started with an idea at Block in 2013. Initially built to take the pain out of peer-to-peer payments, Cash App has gone from a simple product with a single purpose to a dynamic ecosystem, developing unique financial products, including Afterpay/Clearpay, to provide a better way to send, spend, invest, borrow and save to our 50+ million monthly active customers. We want to redefine the world’s relationship with money to make it more relatable, instantly available, and universally accessible. Today, Cash App has thousands of employees working globally across office and remote locations, with a culture geared toward innovation, collaboration and impact. We’ve been a distributed team since day one, and many of our roles can be done remotely from the countries where Cash App operates. No matter the location, we tailor our experience to ensure our employees are creative, productive, and happy. The Role You will join the Recon and Reporting team, which owns our post-transaction systems: the platform responsible for reconciling money, tracing the end-to-end flow of funds, and meeting our tax and regulatory reporting obligations to merchants, customers, and authorities worldwide. Reconciliation and financial reporting are essential to running a payments business, and given our transaction volume, this role has direct, measurable impact on financial accuracy and trust. As a Senior Analyst on the team, you will independently own reconciliation and reporting workstreams end to end. You will be the subject matter expert who ensures the numbers tie out: reconciling card-network settlement and report files (Visa, Mastercard, and equivalents), along with data from acquirers, processors, and banks, against our internal payment and ledger data. You will translate ambiguous reconciliation and reporting needs into concrete metrics, controls, and automated solutions, drive discrepancies to root cause and resolution, and directly influence the team's roadmap and the priorities of

Position Overview As a Solutions Engineer at Diligent, you will partner closely with Sales to help organizations understand how our platform can transform the way they identify and mitigate risk, perform audits, strengthen controls, and operationalize broader GRC programs. You’ll independently lead the SE workstream on small to mid-sized opportunities, while partnering with more senior Solutions Engineers on complex, multi-pillar deals, acting as a trusted partner to customer stakeholders and helping translate Risk & Audit and broader GRC challenges into clear, compelling solutions that drive business value. If you enjoy combining domain expertise, storytelling, solution design, and customer interaction and are looking to build your career in a commercial, customer-facing environment, this is a strong next step. Key Responsibilities Customer & Commercial Partnership Partner with Sales to lead the full pre-sales lifecycle for small to mid-sized opportunities, helping customers understand how Diligent solves real-world risk, audit, and control management challenges. Deliver independent, well-prepared, tailored software demonstrations that clearly articulate business value, while seeking coaching and feedback from senior team members for continuous improvement. Engage confidently with stakeholders across Internal Audit, Risk, Compliance, IT, Controls, and Governance teams, owning day-to-day customer conversations and escalating to senior SEs for high-risk or complex topics as needed. Translate customer pain points into clear solution narratives, including outcomes and success criteria, to support deal progression and closure. Own the technical win for small to mid-sized opportunities, and contribute to the technical strategy on larger, multi-stakeholder deals in partnership with senior SEs. Solution Design & Thought Leadership Design and present solu

Position Overview As a Solutions Engineer at Diligent, you will partner closely with Sales to help organizations understand how our platform can transform the way they identify and mitigate risk, perform audits, strengthen controls, and operationalize broader GRC programs. You’ll independently lead the SE workstream on small to mid-sized opportunities, while partnering with more senior Solutions Engineers on complex, multi-pillar deals, acting as a trusted partner to customer stakeholders and helping translate Risk & Audit and broader GRC challenges into clear, compelling solutions that drive business value. If you enjoy combining domain expertise, storytelling, solution design, and customer interaction and are looking to build your career in a commercial, customer-facing environment, this is a strong next step. Key Responsibilities Customer & Commercial Partnership Partner with Sales to lead the full pre-sales lifecycle for small to mid-sized opportunities, helping customers understand how Diligent solves real-world risk, audit, and control management challenges. Deliver independent, well-prepared, tailored software demonstrations that clearly articulate business value, while seeking coaching and feedback from senior team members for continuous improvement. Engage confidently with stakeholders across Internal Audit, Risk, Compliance, IT, Controls, and Governance teams, owning day-to-day customer conversations and escalating to senior SEs for high-risk or complex topics as needed. Translate customer pain points into clear solution narratives, including outcomes and success criteria, to support deal progression and closure. Own the technical win for small to mid-sized opportunities, and contribute to the technical strategy on larger, multi-stakeholder deals in partnership with senior SEs. Solution Design & Thought Leadership Design and present solu