About this role

Grafana Labs, the company behind the open observability cloud, is founded on the principles of open source, open standards, open ecosystems, and open culture. Grafana Cloud, our fully managed observability platform, is flexible and built for scale. With Grafana Cloud's actually useful AI, organizations can see, understand, and act on all their disparate data to move at the speed of their ambitions. Today, more than 35 million users and 7,000+ customers – including Anthropic, Bloomberg, NVIDIA, Microsoft, and Salesforce – trust Grafana Labs to ensure reliability of their applications and systems, resolve incidents quickly, and optimize their telemetry to reduce noise and cost.

We are a 100% remote company with 1,600+ team members across 40+ countries, and we’re backed by leading investors including Lightspeed Venture Partners, Sequoia Capital, GIC, Coatue, J.P. Morgan, CapitalG, and Lead Edge Capital. Learn more at grafana.com and follow us on LinkedIn and X . We’re scaling fast and staying true to what makes us different: an open-source legacy, a global collaborative culture, and a passion for meaningful work.

Our team thrives in an innovation-driven environment where transparency, autonomy, and trust fuel everything we do. You may not meet every requirement, and that’s okay. If this role excites you, we’d love you to raise your hand for what could be a truly career-defining opportunity. The Opportunity: We're looking for a Senior Manager, IT SOX Audit to help stand up Grafana Labs' IT SOX program from the ground up as we scale our controls and governance for our next stage of growth.

This is a hands-on, high-visibility role reporting to the Head of Internal Audit, with direct exposure to Finance, IT, Engineering, Security, and senior leadership. This is a player-coach individual contributor role today. You'll architect and execute the IT SOX program yourself and with external consultant support, influencing through expertise rather than direct reports. As the function matures, you'll have the opportunity to broaden your scope into technology and IT audit and to build and lead a team over time.

Success here isn't measured by control test completion rates or a tally of audit projects. It's measured by whether Grafana is more risk-intelligent, better controlled, and able to continue to scale because of your work. This is ideal for someone who enjoys building from scratch, partnering closely with stakeholders, and leveraging modern tools, including AI, to deliver efficient, high-impact assurance. What You'll Be Doing: Partner with the Head of Internal Audit to build and operate Grafana's IT SOX program from the ground up: scoping, risk assessment, control design, and testing across IT general controls (ITGCs) and key application controls tied to financial reporting.

Design and execute all phases of IT SOX activity: walkthroughs, design and operating effectiveness testing, documentation, status tracking, deficiency identification, and remediation validation. Assess ITGCs and application controls across key financial systems and Grafana's cloud/SaaS environment (e.g., NetSuite, Salesforce, Workday]). Own the IT SOX documentation library in partnership with the Business Process / Finance SOX lead (narratives, flowcharts, and IT risk-and-control matrices (RCMs), and keep it audit-ready at all times.

Drive deficiency management conversations with control owners, advocating for automation-first, scalable remediation over manual, siloed patches. Own the relationship with external IT auditors, ensuring testing methodologies and documentation meet PCAOB standards and align with external auditor expectations to create the foundation for a future reliance strategy. Leverage AI and automation to enhance scoping, testing, and continuous monitoring, building capabilities and operationalizing insights, not just running checklists.

Evaluate the IT control impact of new systems, tools, operations, and policies as Grafana scales. Manage co-source partner resources while maintaining quality and driving consistency across the program. Report on IT SOX status, risks, deficiencies, and remediation to the Head of Internal Audit and senior leadership. Over time, help extend the function beyond SOX into broader technology and IT audit, and build, mentor, and scale a team as the organization grows.

What Makes You a Great Fit: 10+ years of progressive experience in IT SOX compliance, IT audit, or IT risk advisory in Big 4 (or similar) and/or an in-house audit, compliance, or risk management function. Proven hands-on expertise in COSO, SOX 404, ITGCs, ITACs, and PCAOB audit standards. Experience standing up, scaling, or transforming an IT SOX program, ideally in a pre-IPO or newly public, high-growth SaaS environment.

Experience auditing cloud-native, SaaS environments and modern ERPs and business applications (e.g., NetSuite, Salesforce, Workday). Track record of implementing or optimizing AI and automated compliance and audit capabilities. Fluency in key frameworks such as COSO, COBIT, NIST CSF, and ISO 27001. Experience with GRC / audit tools, or building home-grown solutions. Strong project management and organizational skills with the ability to oversee complex programs and prioritize ruthlessly.

Proven ability to inform and influence senior management stakeholders. You can influence without authority and make technical risk clear, urgent, and actionable. CISA, CPA, CIA, or CISSP strongly preferred. High integrity, ownership, curiosity, and a continuous-improvement mindset. Bonus Points For: A blend of both Big 4 (or similar) and in-house audit, compliance, or risk management leadership experience. Experience in a pre-IPO and/or newly public, high-growth, consumption/usage-based SaaS technology company.

Additional certifications that signal breadth and depth: CPA, CISM, CRISC, or CGEIT. ISACA AAIA (Advanced in AI Audit), or a demonstrated track record of investing in AI governance and audit innovation. Experience

Source listing: greenhouse_grafanalabs