Manager, IT SOX & Internal Audit

This is an in-person role in the Toronto, Ontario office. Candidates must be based within a 50-mile commuting distance of the office (240 Richmond St W, Toronto, ON) and able to be physically present in the office 4 days a week. 

We are hiring a Manager, IT SOX & Internal Audit, to lead Opendoor’s IT SOX program, technology audit coverage, system-implementation reviews, and automation initiatives. This role is highly technical and hands-on, partnering with Engineering, Security, Data, and Product to deliver a modern, AI-enabled approach to risk and controls.

You will lead IT risk assessments, manage Information Technology General Controls (ITGCs) and automated control testing strategies, conduct deep technical reviews, support system implementations, and build automation using SQL, Python, and modern data tools.

This role is critical to building a scalable, efficient, automation-first SOX program.

• Lead Opendoor’s IT SOX 404 program covering ITGCs, automated controls, and key system-generated reports.

• Drive the annual IT risk assessment and SOX scoping process.

• Lead walkthroughs, design assessments, testing strategies, and remediation.

• Manage external auditors/consultants and ensure PCAOB-aligned execution.
   

• Lead IT SOX reviews for new system implementation, cloud launches, infrastructure changes, and major upgrades.

• Participate early in solution design to identify SOX and IT risks.

• Ensure each implementation includes adequate automated controls, access governance, and monitoring.

• Support a smooth and compliant implementation by mitigating risks early and ensuring required controls are designed, tested, and deployed.
   

• Use SQL and Python to automate testing, population validation, evidence analysis, and workflows.

• Build or enhance continuous monitoring scripts and data-driven audit procedures.

• Evaluate and audit AI/ML workflows, pipelines, and automation tools for controls and monitoring requirements.

• Partner with Engineering, Security, and Data Engineering to implement automated controls and reduce manual operational work.
   

• Lead audits covering AWS infrastructure, Snowflake security, Databricks governance, and identity/access governance.

• Evaluate DevOps processes, change management, code deployment, and infrastructure-as-code.

• Review data flows, security controls, and operational reliability across cloud systems.

• Partner with InfoSec and Engineering to drive long-term remediation and control improvement.
   

• Maintain IT SOX documentation, RCMs, narratives, and testing strategy.

• Manage evidence collection and ensure accuracy and completeness of audit documentation.

• Track issues and remediation progress, prepare dashboards, and support SOX tooling enhancements.
   

• Serve as the primary advisor for IT SOX, cloud security controls, automation, and system implementation risks.

• Partner with Engineering, Product, Security, Data, and Accounting.

• Support operational audits, investigations, and special projects involving systems, cloud, or data quality.
   

Minimum Qualifications

• A minimum of 5+ years of IT SOX, IT audit, or Technology Risk experience.

• Experience reviewing or supporting system implementations, cloud migrations, and major upgrades.

• Expertise with data conversion testing, UAT planning, configuration reviews, and cutover readiness.

• Technical expertise in AWS, Snowflake, Databricks, and modern engineering environments.

• Proficiency in SQL and Python, with hands-on automation or audit scripting experience.

• Understanding of AI/ML risk, data pipelines, and automation workflows (preferred).

• Strong knowledge of COBIT, COSO, PCAOB, NIST, and IT security frameworks.

• Experience managing auditors or consulting teams.

• Excellent communication and stakeholder management skills.
   

Preferred Qualifications

• Some Big 4 Accounting experience in addition to industry experience

• Certifications: CISA, CISSP, CIA, CPA, AWS Cloud Practitioner, or similar

• Experience with SOC 1/SOC 2, PCI, ISO 27001, GDPR, or other cloud compliance frameworks

• Background in high-growth technology or AI-driven organizations

• Experience designing or auditing automated controls or continuous monitoring processes

Our compensation reflects the cost of labor across several  geographic markets, and we pay differently based on those defined markets. Base pay is one part of our total compensation package and is determined within a range. This provides the opportunity to progress as you grow and develop within a role. The pay range for this position in Toronto, Ontario, Canada is C$95,200.00 - C$119,000.00 annually. Pay within this range varies by work location and may also depend on your qualifications, job-related knowledge, skills, and experience. Your recruiter can share more about the specific salary range for the job location during the hiring process. We also offer a comprehensive package of benefits including paid time off, 12 paid holidays per year, medical/dental/vision insurance, basic life insurance, and 401(k) to eligible employees.

 #LI-LS

#LI-Onsite