Manager, Internal Audit (Remote)

Overview In this role you will own the BP SOX areas within Procore’s Internal Audit team, driving end-to-end SOX processes and independent testing. You will collaborate with cross-functional leaders, external auditors, and compliance to maintain robust audit documentation and improve controls. You’ll apply deep SOX 404 expertise to assess the control environment, influence process design, and advance audit methodologies. This position offers remote US work and a chance to shape financial accountability across the organization. Compensation / BenefitsBase pay range providedEquity compensation possibleBonus incentive compensation possible ResponsibilitiesOwn end-to-end SOX lifecycle for assigned BP areasPlan and independently execute Tests of Design (TOD) and Tests of Operating Effectiveness (TOE)Create and manage audit documentation (RCMs, flowcharts, testing attributes, workpapers)Support annual SOX scoping and risk assessment with materiality evaluationsAdvise on internal controls during system implementations and major process changesBuild and maintain relationships with process owners and the broader compliance teamIdentify control deficiencies, evaluate remediation plans, and escalate as neededCoordinate with external auditors for walkthroughs, testing, and evidence requestsContinuously improve audit methodologies and promote agile practicesDraft risk and control narratives and process maps for transparency Key requirements5+ years of relevant audit experience, ideally combining Big 4 public accounting with in-house BP SOX at a publicly traded companyActive CPA or CIA certification requiredDeep practical understanding of SOX 404, COSO, annual scoping methodologies, and US GAAPAbility to independently execute TOD/TOE and produce risk/control matrices and process documentationStrong stakeholder management and ability to influence cross-functional teamsExperience auditing or advising on system implementations and SaaS financial ERPs is preferredExceptional stakeholder managementEmpathy and emotional intelligenceClear communication of complex control requirementsSOX 404COSO frameworkRisk assessment and scoping