Fivetran Director, SOX Compliance & Internal Controls to build and lead Fivetran’s internal controls program using the COSO framework. Owns relationships with auditors and third-party control testers.
Responsibilities
Fivetran is building a SOX Compliance function from the ground up. Reporting directly to the Chief Accounting Officer (CAO), the Director, SOX Compliance & Internal Controls will design and stand up Fivetran’s internal controls program using the COSO framework. This will include risk and control matrices (RCMs), narratives, and test plans for both business process controls and IT application controls/IT general controls (ITACs/ITGCs). The individual will own the relationship with third-party control-testing providers and the external audit team (KPMG) as the company moves through its SOX readiness and 404(a) compliance.
This is a highly visible, build-phase mandate. You will have significant latitude and accountability to shape the control environment, tooling, and governance model that Fivetran will operate on. You will partner closely with Accounting, India CoE, FP&A, Legal, HROps, Revenue, IT/Engineering, Security, and every control owner across the business.
This is a full-time, hybrid position based out of our Oakland, CA office. Our hybrid work model offers a blend of remote flexibility and in-person collaboration, including one day in the office each week to connect and build as a team.
SOX Program Build & Governance
Design, build, and lead Fivetran’s end-to-end SOX 404 compliance program in accordance with the COSO 2013 framework and 404(b) integrated audit standards.
Lead the risk assessment and scoping process (significant accounts, processes, and locations) in partnership with the external auditors.
Build and maintain the company’s risk and control matrices (RCMs), process narratives, and flowcharts across key financial processes, including order-to-cash/revenue, procure-to-pay, payroll and equity compensation, treasury, financial close and reporting, tax and entity-level controls.
Design and document control activities (preventive and detective, manual and automated) that are efficient, right-sized, and audit-ready.
Build a SOX/GRC workflow tool using AI to manage controls, testing, issues, and evidence.
ITGC / ITAC & IT Risk
Partner with Engineering, IT, and Security to design and test IT general controls (access management, change management, computer operations/backups) and IT application controls (automated controls, interfaces, system-generated reports/IPE) across in-scope systems (NetSuite, Coupa, Salesforce CRM, Workday, data warehouse, AI-agents built using frontier AI models and other SaaS solutions).
Build segregation-of-duties (SoD) analysis and monitoring across key financial systems.
