IT Audit Manager

The IT Audit Manager at Figma is responsible for overseeing the IT SOX Compliance Program, managing technology risk audits, and collaborating with various teams to assess the effectiveness of internal controls. Additionally, they lead risk assessments for new products and ensure that controls are adequately documented and tested, all while contributing to the broader risk management framework.

To apply for the IT Audit Manager position at Figma, candidates should have at least 7 years of experience in information security and IT auditing, particularly with a focus on SOX compliance. Proficiency in audit methodologies and regulations, as well as excellent communication skills, are essential. Certifications such as CA, CPA, CIA, CISA, or CFE are preferred.

Yes! The IT Audit Manager role at Figma can be held from one of our US hubs or completely remotely within the United States. We believe in flexibility and want to provide our employees with the opportunity to work from where they feel most productive.

Absolutely! At Figma, we embrace our value of 'Grow as you go.' We actively invest in the professional development of our employees, providing access to various learning and development opportunities, which helps the IT Audit Manager enhance their skills and grow within the organization.

The annual base salary range for the IT Audit Manager role at Figma in our San Francisco or New York hub is between $122,000 and $238,000. This range may vary based on individual qualifications and experience, and the pay structure for remote roles is adjusted based on employee work location.

In answering this question, you should highlight your direct experience with SOX compliance programs, your role in conducting IT audits, and your understanding of internal controls relevant to financial reporting. Be prepared to discuss specific projects where your contributions led to improved compliance or audit readiness.

Focus on demonstrating your adaptability and understanding of the complexities within the SaaS landscape. Discuss your methods for assessing risks related to new technologies and ensuring IT general controls are scalable and effective, considering rapid changes in the business model.

Emphasize your strong communication and interpersonal skills. Mention how you facilitate meetings, use collaborative tools, and build relationships across departments to ensure that all stakeholders are aligned with compliance goals and audit objectives.

Provide specific examples where you conducted assessments that uncovered control deficiencies. Explain the remediation process you initiated, how you coordinated with teams, and ultimately, the results achieved to mitigate risks and enhance compliance.

Discuss your familiarity with frameworks such as NIST and ISO, and explain how these guidelines shape your approach to auditing IT controls. Highlight any experience applying these frameworks in your previous roles to strengthen your compliance strategies.

Explain how data analytics tools can enhance audit efficiency and effectiveness by identifying anomalies or trends that may indicate compliance issues. Share any specific tools you have experience with and how you've successfully utilized data analytics in past audits.

Share your commitment to continuous learning through professional organizations, webinars, industry publications, or certification programs. Emphasize your proactive approach to staying informed and ensuring compliance with the latest regulations.

Provide a specific story that showcases your problem-solving skills and ability to navigate complex situations. Discuss the challenges, your analytical process, and the ultimate resolution which demonstrates your effectiveness as an IT Audit Manager.

Discuss how automation can streamline the audit process, improve accuracy, and allow for real-time monitoring of controls. Share any experience you've had in implementing automated tools and the benefits they provided to both the audit process and overall compliance.

Mention your approach to working with cross-functional teams during system enhancements, emphasizing the importance of reviewing and documenting internal controls as part of the planning and implementation phases to ensure compliance is maintained.