SR. INTERNAL AUDIT MANAGERSpaceX is seeking an Sr. Internal Audit Manager to lead SOX Information Technology General Controls (ITGC) and IT-focused audits. This is a hands-on role that will plan and execute software development lifecycle audit work and partner with IT, Engineering, and Finance teams on control design and operating effectiveness during system changes across both packaged and in-house applications.
RESPONSIBILITIES:- Lead end-to-end IT audits with primary focus on IT General Controls (access management, change management, IT operations, logical security, backup/recovery, and related domains)
- Evaluate execute software development lifecycle controls across the full lifecycle (requirements, design, development, testing, deployment, maintenance), in modern delivery environments
- Design and execute risk-based audit programs covering application controls, infrastructure, cloud environments, data integrity, and system implementations
- Perform and oversee SOX 404 ITGC testing and related walkthroughs; assess control design and operating effectiveness
- Identify control gaps, root causes, and emerging technology risks; develop practical, risk-ranked recommendations and track remediation to closure
- Collaborate with process owners and engineers to strengthen the control environment and provide consultative guidance on control design during system implementations and process changes
- Stay current on relevant frameworks, regulations, and technology trends (SOX, COBIT, NIST, ISO 27001, etc.) and incorporate them into audit approaches
- Support special projects, investigations, and continuous monitoring initiatives as needed
- Manage relations with external auditors to ensure deadlines are being met
- Deliver clear reporting to leadership
BASIC QUALIFICATIONS:- Bachelor's degree
- 10+ years of audit experience
PREFERRED SKILLS AND EXPERIENCE:- 10+ years of progressive IT audit, IT risk, or IT compliance experience
- Internal audit experience from Big 4
- "Run it like you own it" mentality with the ability to thrive in a high paced, ever-changing environment
- Strong analytical problem solving and project management skills
- Public company experience (or equivalent large, complex organization experience) with strong SOX 404 ITGC testing experience
- Solid understanding of risk assessment methodologies, internal control frameworks, and audit standards (IIA, ISACA)
- Professional certifications: CISA (strongly preferred); CISSP, CIA, CISM, CRISC, or equivalent
- CPA (Certified Public Accountant)
ADDITIONAL REQUIREMENTS:- This position is based in Hawthorne, CA (Los Angeles area), and requires being onsite full-time - hybrid and remote work will not be considered
- Willingness to work long hours and weekends as needed
COMPENSATION AND BENEFITS:Pay Range:
Level 3: $200,000.00 - $275,000.00
Your actual level and base salary will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge and skills, education, and experience.
Base salary is just one part of your total rewards package at SpaceX. You may also be eligible for long-term incentives, in the form of company stock or long-term cash awards, as well as potential discretionary bonuses and the ability to purchase additional stock at a discount through an Employee Stock Purchase Plan. You will also receive access to comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short and long-term disability insurance, life insurance, paid parental leave, and various other discounts and perks. You may also accrue 3 weeks of paid vacation and will be eligible for 10 or more paid holidays per year. Employees accrue paid sick leave pursuant to Company policy which satisfies or exceeds the accrual, carryover, and use requirements of the law.
ITAR REQUIREMENTS:- To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. a7 1157, or (iv) Asylee under 8 U.S.C. a7 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here.
