IT Internal Audit Manager

SpaceX is seeking an IT Internal Audit Manager to lead SOX Information Technology General Controls (ITGC) and IT-focused audits. This is a hands-on role that will plan and execute software development lifecycle audit work and partner with IT, Engineering, and Finance teams on control design and operating effectiveness during system changes across both packaged and in-house applications.

• →Lead end-to-end IT audits with primary focus on IT General Controls (access management, change management, IT operations, logical security, backup/recovery, and related domains)
• →Evaluate execute software development lifecycle controls across the full lifecycle (requirements, design, development, testing, deployment, maintenance), in modern delivery environments
• →Design and execute risk-based audit programs covering application controls, infrastructure, cloud environments, data integrity, and system implementations
• →Perform and oversee SOX 404 ITGC testing and related walkthroughs; assess control design and operating effectiveness
• →Identify control gaps, root causes, and emerging technology risks; develop practical, risk-ranked recommendations and track remediation to closure
• →Collaborate with process owners and engineers to strengthen the control environment and provide consultative guidance on control design during system implementations and process changes
• →Stay current on relevant frameworks, regulations, and technology trends (SOX, COBIT, NIST, ISO 27001, etc.) and incorporate them into audit approaches
• →Support special projects, investigations, and continuous monitoring initiatives as needed
• →Manage relations with external auditors to ensure deadlines are being met
• →Deliver clear reporting to leadership

• Bachelor’s degree
• 6+ years of audit experience

• 7+ years of progressive IT audit, IT risk, or IT compliance experience
• Internal audit experience from Big 4
• "Run it like you own it” mentality with the ability to thrive in a high paced, ever-changing environment
• Strong analytical problem solving and project management skills
• Public company experience (or equivalent large, complex organization experience) with strong SOX 404 ITGC testing experience
• Solid understanding of risk assessment methodologies, internal control frameworks, and audit standards (IIA, ISACA)
• Professional certifications: CISA (strongly preferred); CISSP, CIA, CISM, CRISC, or equivalent
• CPA (Certified Public Accountant)

• This position is based in Hawthorne, CA (Los Angeles area), and requires being onsite full-time – hybrid and remote work will not be considered
• Willingness to work long hours and weekends as needed

• To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. § 1157, or (iv) Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here.  

SpaceX is an Equal Opportunity Employer; employment with SpaceX is governed on the basis of merit, competence and qualifications and will not be influenced in any manner by race, color, religion, gender, national origin/ethnicity, veteran status, disability status, age, sexual orientation, gender identity, marital status, mental or physical disability or any other legally protected status.

Applicants wishing to view a copy of SpaceX’s Affirmative Action Plan for veterans and individuals with disabilities, or applicants requiring reasonable accommodation to the application/interview process should reach out to EEOCompliance@spacex.com.