About The RoleThe Head of SOX & Internal Audit will establish and lead the Company's SOX compliance program and eventually progress towards establishing the Internal Audit function. This individual will serve as a trusted advisor to executive leadership and the Audit Committee, providing independent assurance regarding the effectiveness of governance, risk management, internal controls, financial reporting processes, cybersecurity controls, and operational risk management.
The successful candidate will build a scalable, risk-based Internal Audit program aligned with Institute of Internal Auditors (IIA) standards and will oversee SOX Section 404 compliance, internal control testing, deficiency remediation, and enterprise risk assessments. The role requires strong leadership, technical expertise, and the ability to partner effectively across Finance, IT, Legal, Operations, Engineering, Security, and executive management. This role aligns with Cerebras' roadmap to create clear separation between Controllership and Independent Testing and to support ongoing compliance as a public company.
Key ResponsibilitiesSOX & Internal Audit Program Leadership- Own the design, implementation, and ongoing operation of the SOX compliance program.
- Lead annual SOX risk assessments, scoping, materiality considerations, and control rationalization efforts.
- Oversee documentation and maintenance of narratives, flowcharts, risk-control matrices (RCMs), and process inventories.
- Direct walkthroughs, control testing, deficiency evaluation, remediation validation, and management reporting.
- Coordinate with Finance, IT, Legal, Security, Engineering, and business process owners to maintain effective internal controls over financial reporting (ICFR).
- Monitor remediation efforts and ensure timely resolution of control deficiencies.
- Drive continuous improvement through automation, control optimization, and reduction of manual testing.
- Support management's SOX Sections 302 and 404 certification processes.
- Establish and lead the Internal Audit function, charter, methodology, policies, and annual audit planning process.
- Develop and execute a risk-based audit plan covering financial, operational, technology, cybersecurity, compliance, and strategic risks.
- Present audit plans, audit results, risk assessments, and emerging risks to executive leadership and the Audit Committee.
Governance, Risk, and Compliance- Assist leadership in strengthening enterprise risk management and governance processes.
- Evaluate entity-level controls and the overall control environment.
- Support fraud risk assessments and development of monitoring programs.
- Assess risks associated with rapidly scaling AI infrastructure, data centers, supply chain operations, manufacturing, inventory management, cybersecurity, export controls, and global operations.
- Review regulatory compliance programs and provide independent assurance over key compliance obligations.
- Partner with Legal and Compliance functions regarding investigations, whistleblower matters, and governance initiatives.
External Auditor & Audit Committee Engagement- Serve as principal liaison with external auditors on internal control, SOX, and audit matters.
- Facilitate reliance strategies and coordination activities between Internal Audit and external auditors where appropriate.
- Prepare Audit Committee materials and provide executive-level reporting on risks, audit findings, and remediation activities.
- Support Board governance initiatives and audit committee oversight responsibilities.
Organizational Development- Build a high-performing Internal Audit organization capable of supporting a public-company environment.
- Develop talent, audit methodologies, and technology-enabled audit capabilities.
- Champion a culture of accountability, ethical conduct, control awareness, and continuous improvement.
Internal Audit Leadership- Ensure the Internal Audit function operates in accordance with IIA Global Internal Audit Standards.
- Develop internal audit methodologies, quality assurance processes, and reporting frameworks.
- Build and manage an Internal Audit team, including co-sourced providers and external consultants as needed.
- Identify emerging risks and recommend practical, business-focused mitigation strategies.
Qualifications- Bachelor's degree in Accounting, Finance, Information Systems, or related field.
- 10+ years of progressive experience in Internal Audit, SOX compliance, Risk Advisory, or public accounting.
- 5+ years in leadership roles managing audit teams and enterprise-wide audit programs.
- SEC reporting requirements
- Internal Controls over Financial Reporting (ICFR)
- Enterprise Risk Management
- Experience building or transforming Internal Audit and SOX programs at public companies or IPO-stage organizations.
- Strong understanding of IT general controls (ITGCs), cybersecurity risks, and technology-enabled business processes.
- Experience presenting to Audit Committees, CFOs, CAOs, and Boards of Directors.
Preferred- CPA, CIA, CISA, or equivalent professional certification.
- Big Four or national public accounting firm experience.
- Semiconductor, hardware, manufacturing, cloud infrastructure, AI, or technology industry experience.
- Proven ability to design, implement, and mature SOX and Internal Audit programs from inception through steady-state operation.
- Experience with ERP environments such as NetSuite, Oracle, SAP, or equivalent.
- Experience implementing data analytics and audit automation tools.
Success Metrics (First 12-18 Months)- Implement sustainable SOX governance structure and testing methodology.
- Improve control maturity and remediation management across key business processes.
- Achieve external auditor reliance on management testing where appropriate.
- Deliver meaningful audit insights to leadership and the Audit Committee.
- Establish Internal Audit function, charter, policies, and reporting structure.
- Complete enterprise risk assessment and risk-based audit plan.
Leadership Competencies- Executive presence and board-level communication skills.
- Independent judgment and professional skepticism.
- Strategic thinker with strong business acumen.
- Ability to influence across highly technical and cross-functional organizations.
- Exceptional project management and organizational skills.
- Strong commitment to integrity, objectivity, and continuous improvement.
