The Head of Internal Audit & SOX leads the company’s Internal Audit function and defines the strategy for strengthening the organization’s risk management, governance, and internal control environment
This role reports administratively to the Chief Financial Officer and functionally to the Audit Committee of the Board of Directors, ensuring the independence and effectiveness of the Internal Audit function
You will be responsible for overseeing the company’s SOX compliance program, enterprise risk management (ERM) activities, risk-based operational audits, and internal investigations. The role will design and execute a modern, risk-focused audit program that supports the company’s continued growth while maintaining a strong control environment
As a senior leader, you will partner closely with executives across Finance, Legal, Security, Engineering, and Operations to identify and evaluate key risks, assess the effectiveness of controls, and provide independent insights that help the company scale responsibly. You will also serve as a trusted advisor to leadership and the Audit Committee by providing perspective on governance, risk management, and operational excellence
The ideal candidate is both strategic and pragmatic; able to build long-term programs while engaging directly with complex operational challenges and emerging risks. Your work will play a critical role in strengthening the company’s governance framework and enabling leadership and the Board to make informed, risk-aware decisions
This role is based in our San Francisco office with an office-centric hybrid schedule. The standard in-office days are Monday, Tuesday, and Thursday. Most Asanas have the option to work from home on Wednesdays. Working from home on Fridays depends on the type of work you do and the teams with which you partner. If you're interviewing for this role, your recruiter will share more about the in-office requirements
What you’ll achieve Lead the Internal Audit function: Define and execute the Internal Audit strategy and annual risk-based audit plan, aligning audit priorities with the company’s evolving risk landscape and strategic objectives
Partner with the Audit Committee: Provide regular updates on audit activities, key risks, control effectiveness, and remediation progress, ensuring transparency and strong governance oversight
Oversee the SOX program: Own the company’s SOX compliance program across business processes, IT controls, and entity-level controls (ELCs), partnering with process owners, external auditors, and consultants to ensure effective execution, remediation, and continuous improvement
Strengthen enterprise risk management: Partner with Legal and executive leadership to facilitate the ERM program, including risk identification, assessment, prioritization, and monitoring of key enterprise risks
Drive operational excellence th