Principal, Technical SOX Compliance Lead

The Difference You Will Make:

In the role of Principal, Technical SOX Compliance, the successful candidate will be responsible for continued development of our IT compliance program for Section 404 of the Sarbanes-Oxley Act of 2002.  You will support testing of key IT SOX controls in a rapidly changing and growing company and technology environment, as a leader in the AirControl Financial Risk & Controls group.  You will evaluate the design and effectiveness of SOX controls, provide guidance to process and control owners over controls, and lead coordination with other SOX stakeholders and external auditors.  

The scope of your work will also include technologies, platform infrastructure, databases  and applications. You will work directly with control owners in the business to evaluate the controls and support business partners in the implementation and maintenance of the controls and interact and support efforts of the Company’s independent auditor.  As part of the annual control evaluations, you will lead the team and perform walkthroughs (including code reviews) over processes and controls to evaluate the design, test sample transactions to evaluate the operating effectiveness, evaluate gaps, and drive the remediation of deficiencies. In addition, you will support the business in implementing system development lifecycle controls for key system implementations. 

The role requires a well-rounded controls focused professional with accounting, deep platform, systems, infrastructure and operational expertise. Excellent communication, resource allocation and project management skills are critical, as well as the ability to influence across functions and various levels.  The position reports to the Director, Financial Risk & Controls (SOX Program Leader) that rolls up to the Head of Global Risk and Internal Audit.

A Typical Day: 

• Lead the annual scoping and risk assessment exercises and determine testing approach for financially relevant systems, services, applications, and tools
• Partner with the SOX Program leader to determine the annual testing plan
• Perform ongoing risk assessments to identify major changes in existing processes and controls and support the business in implementing systems development lifecycle controls
• Provide guidance to a team of external testing resources and direct management of internal testing resources
• Lead and execute design and operating effectiveness testing for higher risk platform automated controls within the Company’s systems 
• Support the testing team and perform detailed reviews over design and operating effectiveness testing for the IT General Control environment
• Perform judgmental control deficiency evaluations to determine potential impacts and level of severity and lead conversations with the external auditors
• Evaluate changes made to the IT environment (including supporting infrastructure and databases) and provide best practice recommendations on controls 
• Apply a new perspective on existing controls to recommend efficiencies in testing and evaluation approaches
• Support business partners in maintaining internal control documentation over key processes
• Support the quarterly 302 certification process 

Your Experience:

• B.A. or B.S. in Accounting or Finance or Management Information Systems or related field
• Minimum of 9+ years of experience, preferably with some years of external audit or consulting experience with publicly traded companies  
• In depth understanding and experience with the requirements of Sarbanes-Oxley Act of 2002, Section 404, COSO framework and PCAOB standards
• Deep Knowledge of platform technology marketplace environments including both 3rd party and home-grown systems
• Understanding of a service oriented platform architecture 
• Experience with external auditor requirements and expectations
• Mission-driven, enthusiastic to learn and grow; team-oriented with a positive attitude and able to work in hyper-growth, fast paced environment
• Ability to work collaboratively with people at all levels of the organization, identify risks and anticipate questions, and provide actionable recommendations based on industry best practices and use influence to ensure execution
• Strong risk management experience, including: performing annual risk assessments, executing annual SOX control testing, and evaluating control deficiencies 
• Role model for Airbnb core values

Your Location:

This position is US - Remote Eligible. The role may include occasional work at an Airbnb office or attendance at offsites, as agreed to with your manager. While the position is Remote Eligible, you must live in a state where Airbnb, Inc. has a registered entity. Click here for the up-to-date list of excluded states. This list is continuously evolving, so please check back with us if the state you live in is on the exclusion list. If your position is employed by another Airbnb entity, your recruiter will inform you what states you are eligible to work from.

Our Commitment To Inclusion & Belonging:

Airbnb is committed to working with the broadest talent pool possible. We believe diverse ideas foster innovation and engagement, and allow us to attract creatively-led people, and to develop the best products, services and solutions. All qualified individuals are encouraged to apply.

We strive to also provide a disability inclusive application and interview process. If you are a candidate with a disability and require reasonable accommodation in order to submit an application, please contact us at: [email protected]. Please include your full name, the role you’re applying for and the accommodation necessary to assist you with the recruiting process. 

We ask that you only reach out to us if you are a candidate whose disability prevents you from being able to complete our online application.