WHAT YOU'LL WORK ONQualia's platform sits at the center of the money movement and recordkeeping that closes a real estate transaction. Our customers, their regulators, underwriters, and auditors need durable assurance that the controls behind that platform work. Building and running that assurance function is the job.
As Senior Manager, Internal Controls, you will own Qualia's SOC 1 program end to end, from readiness through a recurring examination, and run the internal audit and control testing that supports our SOC 2 program. Today much of our SOC readiness work is supported by outside consultants; a core goal of this role is to bring that capability in-house and become the internal owner of it. Over time, the mandate expands: as Qualia scales, this role grows into the foundation of a broader internal audit function covering financial, operational, and compliance risk across the company.
This is a high-visibility individual contributor role reporting to the VP of Finance, with regular exposure to the executive team, external auditors, and customer teams.
RESPONSIBILITIES- Own the SOC 1 program end to end: Drive Qualia's SOC 1 readiness and examination lifecycle including control design, process narratives, risk and control matrices, evidence collection, gap remediation, and management of the external audit across our suite of products.
- Run internal audit for SOC 2: Plan and execute internal control testing supporting Qualia's SOC 2 program; assess control operating effectiveness, document findings, and partner with Security, Engineering, and Operations owners to close gaps before the external auditor finds them
- Bring the capability in-house: Absorb and internalize work currently performed by outside consultants; build the documentation, testing cadence, and institutional knowledge that let Qualia run these programs without ongoing external dependency
- Build the internal audit function: Establish a risk assessment framework and a forward audit plan that extends beyond SOC into financial, operational, and compliance reviews; set the standard for how audit work is scoped, tested, documented, and reported at Qualia
- Be a credible partner, not a checkpoint: Work directly with process owners across Finance, Accounting, Security, Engineering, and Operations to design controls that actually fit how the business runs; earn the trust that makes remediation happen
- Report clearly to leadership: Translate control status, findings, and residual risk into crisp, honest reporting for executive and Board-level audiences and for customer diligence
- Automate the audit function: Build AI-powered and system-driven workflows for evidence collection, control testing, and issue tracking that reduce manual effort and make continuous monitoring realistic rather than aspirational
YOUR BACKGROUND THAT LIKELY MAKES YOU A MATCH- 6+ years in internal audit, external audit, SOC reporting, or IT/financial controls, with a demonstrated track record of increasing scope and ownership over time; public accounting or advisory background welcome
- Direct, hands-on SOC 1 experience. You have built or audited a SOC 1 program, and you know the difference between a control that reads well and a control that survives testing
- Working knowledge of SOC 2 and the Trust Services Criteria, and comfort testing controls that live in engineering and infrastructure environments, not just in the GL
- Strong command of internal control frameworks (COSO, ICFR concepts) and risk-based audit planning; able to scope an audit from a blank page rather than inheriting a program
- Comfortable in ambiguity and building from zero. This is a first-of-its-kind role at Qualia, and you will define much of the mandate as you execute it
- Excellent written communication. Your narratives, workpapers, and findings need to hold up in front of an external auditor and read clearly to an executive
- Intellectual honesty and independence: you can deliver an unwelcome finding to a senior leader and keep the relationship intact
- AI-forward: Actively uses AI tools (e.g., Claude, Gemini) to accelerate documentation, testing, and evidence workflows; both experimenting, and ultimately operationalizing
- CPA, CIA, or CISA preferred
- Experience in financial services, fintech, payments, or a regulated industry is a plus
- Based in San Francisco, CA or Austin, TX, with the ability to work in the office a minimum of two days per week is required.
This role has a base annual salary of $165,000 - $195,000 plus a competitive equity and benefits package. (Salary to be determined by relevant experience, location, knowledge, and skills of the applicant, internal equity, and alignment with market data.)
