Senior Internal Auditor
Okta · Posted Nov 2
Cloud-based identity and access management solutions for workforce and customer security
Bengaluru, IndiaFull-timeHybridSenior Level4–6 years₹35.0L–₹50.0L yearly<25 applicants
Enterprise SoftwareCybersecurityIdentity ManagementCloud ComputingPublic Company
Be an early applicantFull time
Get a personal compatibility score
Add a resume for personal matches
About the role
Okta is an identity company providing Workforce Identity Cloud and Customer Identity Cloud (Auth0) to enable secure access and authentication. The global Internal Audit team drives Okta’s global Internal Audit and SOX IT compliance program across critical enterprise applications, infrastructure, and cloud environments. This role leads ITGC, ITAC, and IPE walkthroughs and testing, mentors auditors, and partners with Engineering, Information Security, and Finance to safeguard internal controls over financial reporting.
What you will do
- Independently lead end-to-end SOX IT walkthroughs and execute design (TOD) and operating effectiveness (TOE) testing in strict alignment with Okta’s Internal Audit and SOX methodology.
- Assess IT General Controls across all primary domains:
- Logical Access & Security: User lifecycle management (provisioning/deprovisioning), privileged access management (PAM), multi-factor authentication (MFA), and segregation of duties (SoD).
- Change Management: Source code repository management, deployment approval gates, testing validation, emergency changes, and CI/CD pipeline controls.
- Computer Operations & Resiliency: Automated batch job scheduling and monitoring, data backup verification, incident/problem management, and disaster recovery.
- Perform rigorous evaluations of automated application controls (ITAC), system-generated reports/queries (IPE), key data integrations, and interface reconciliations.
- Review third-party Service Organization Control reports (SOC 1 / SOC 2 Type II) to evaluate complementary user entity controls (CUECs) and determine impacts on in-scope hosted/SaaS systems.
- Participate and support Internal Audits planned for the year.
- Prepare self-reviewed, audit-ready workpapers and documentation within Okta's GRC platform with clear evidence, testing samples, and audit conclusions requiring minimal editorial revision.
- Review staff and associate auditor work products, providing actionable coaching and feedback to elevate overall team quality and audit rigor.
- Actively champion SOX methodology improvements, control standardization, and testing efficiencies across the Internal Audit team.
- Pinpoint systemic root causes of control breakdowns and bridge technical gaps between engineering realities and compliance expectations—moving beyond symptom identification.
- Draft precise, well-contextualized deficiency write-ups and collaborate with control owners (TDI, Security, Engineering, and Finance) to reach alignment on remediation strategies and Compensating Controls.
- Track Management Action Plans (MAPs) and perform remediation testing to validate sustained resolution of identified gaps.
- Support direct audit coordination with external auditors, effectively addressing queries and facilitating seamless walkthroughs and sample validations.
- Identify opportunities to rationalize redundant controls, eliminate manual testing fatigue, and leverage automated system capabilities.
- Assist in incorporating data analytics, scripting, and RPA/bot governance to streamline audit sample extraction, configuration inspections, and continuous control monitoring.
Skills used in this role
What the employer is looking for
- Education: Bachelor’s or Master’s degree in Management Information Systems (MIS), Computer Science, Information Technology, Accounting, Finance, or related STEM/business discipline.
- Experience: 4–6 years of relevant experience in IT audit, SOX compliance, technology risk consulting, or internal controls assurance within a Big Four public accounting firm and/or a publicly traded enterprise (high-growth SaaS / cloud technology company preferred).
- Technical Mastery:
- Deep functional knowledge of SOX 404 requirements, PCAOB standards, COBIT, NIST CSF, and the COSO internal control framework.
- Practical experience testing core enterprise systems, including ERP platforms (e.g., NetSuite, Workday), CRM/Billing systems (Salesforce), Identity & Access Management tools, and cloud environments (AWS, GCP, Azure).
- Demonstrated track record evaluating ITGCs, automated application controls, and complex report/query logics (IPE).
- Deficiency & Root Cause Analysis: Proven capability in assessing control deficiencies, determining financial statement impact/significance, and formulating corrective actions with process owners.
- Communication & Collaboration: Excellent verbal and written English communication skills; demonstrated confidence in facilitating walkthroughs and presenting findings to cross-functional leadership.
- Global Team Player: Self-motivated mindset with the ability to operate independently across distributed time zones (including supporting Pacific Time collaboration when necessary).
Preferred qualifications
- Professional certification such as CISA (Certified Information Systems Auditor) strongly preferred; CIA, CISSP, CISM, or CPA is an added advantage.
- Direct hands-on experience using modern GRC tools such as Optro.
- Familiarity with database query languages (SQL) or data analytics platforms (Alteryx, Snowflake, Tableau) to automate testing validations.
- Understanding of modern DevOps environments, cloud security posture, and CI/CD release management tools (e.g., GitHub, Jira).
Benefits and support
- Compensation and benefits are detailed in the job posting
About Okta
Okta is a leading independent provider of cloud-based identity and access management solutions that securely connect people and technologies to the right applications. The company powers both Workforce Identity and Customer Identity platforms, allowing organizations to securely manage user access and navigate modern challenges like agentic AI security.
- Industry
- Enterprise Software
- Company size
- 7500+ employees
- Founded
- 2009
- Location
- San Francisco, California, USA
- Funding stage
- Public Company
Funding
Public Company · $228M raised
Sequoia CapitalAndreessen HorowitzGreylock PartnersKhosla VenturesAltimeter Capital
- 2010-02-01Series A$10M
- 2011-08-01Series B$16.5M
- 2012-12-01Series C$25M
- 2013-09-01Series D$27M
- 2014-06-01Series E$75M
- 2015-09-01Series F$75M
- 2018-02-21Post IPO Debt$300M
Leadership
TM
Todd McKinnon
Co-Founder and Chief Executive Officer
FK
Frederic Kerrest
Co-Founder and Executive Vice Chairman
SD
Shannon Duffy
Chief Marketing Officer
SM
Scott Morgan
Chief Legal Officer
Recent coverage
Okta Newsroom
Industry Leaders Form the Blueprint Alliance to Advance a Shared Architecture for Securing AI Agents2026-09-22
Okta Newsroom
Okta Names Helen Riley to Board of Directors2026-09-18
Okta Newsroom
Okta to Host Investor Summit Webcast in Conjunction with Oktane2026-09-14