FICO is an analytics and software company known for the FICO® Score, which lenders use to evaluate credit risk. Its broader technology platform combines data, artificial intelligence, and machine learning to support decision-making and customer engagement. FICO develops solutions for areas including fraud detection, credit scoring, and customer lifecycle management, serving organizations across sectors such as finance, telecommunications, consulting, insurance, and healthcare. Its products are designed to help businesses analyze conditions in real time, adapt decision processes, and manage complex scenarios.
Internal Audit Manager, IT & SOX - California Remote
Lead IT, SOX 404, cloud security and technology control audits for FICO, a global analytics software company. Use data analytics and AI-enabled tools to strengthen audit assurance.
Description
- Direct IT audit engagements from planning and risk assessment through walkthroughs, control testing, issue development and remediation validation.
- Manage the SOX 404 IT general controls program for designated financial applications and infrastructure.
- Test application controls, reports, interfaces and system-generated data that support financial reporting.
- Conduct annual and ad hoc segregation-of-duties reviews while automating data extraction, normalization and comparison.
- Audit identity and access management controls, including provisioning, privileged access and periodic reviews.
- Assess change and release management controls across Git, CI/CD, Jira and ServiceNow.
- Evaluate controls for cloud infrastructure and enterprise data platforms.
- Conduct cybersecurity and cloud security assessments across FICO SaaS product environments.
- Assist with third-party risk assessments and SOC 1 and SOC 2 report reviews.
- Support AI and model governance risk coverage using NIST AI RMF and ISO/IEC 42001.
- Use data analytics, AI-assisted tools, scripted population extraction, full-population testing and continuous monitoring.
- Prepare audit work papers and present findings to the Chief Audit Executive and/or Senior Manager, IT Risk & Assurance.
- Coordinate external auditor and internal stakeholder activities, including scoping, walkthroughs, evidence, PBC requests and open-item closure.
- Collaborate with IT, Engineering, Security, Finance and business process owners.
- Recommend enhancements to FICO’s internal controls and related processes.
- Coach and review junior auditors and co-sourced team members.
- Report progress, control deficiencies and audit findings to leadership while meeting deadlines and protecting confidentiality.
Requirements
- Bachelor’s degree in information technology, information systems, computer science, accounting or a related discipline; equivalent practical experience may be considered.
- Approximately 3–5 years of progressive IT audit experience, with at least 3 years recommended.
- Substantial experience owning or leading ITGC and SOX 404 testing.
- Hands-on experience testing IT general and application controls for a major ERP; Oracle is strongly preferred, while SAP, NetSuite or comparable platforms are also relevant.
- Experience auditing cloud-hosted business applications such as HCM, CRM, revenue and data warehouse platforms.
- Experience applying AI and automation to audit work; the team uses Claude.
- Working knowledge of identity governance and privileged access concepts.
- Cloud audit experience with AWS; Azure or GCP experience is also relevant.
- Familiarity with COSO 2013, COBIT, NIST CSF, NIST SP 800-53, ISO/IEC 27001, SOC 1, SOC 2, PCI DSS, GDPR, HIPAA and U.S. state privacy laws including CCPA/CPRA.
- Advanced Excel skills, including Power Query.
- Data and scripting proficiency; SQL and Python are most immediately useful, while PowerShell, VBA, Power BI, Tableau, shell scripting, regular expressions and REST APIs are valuable.
- CISA certification completed or actively in progress.
- Proactive, self-directed approach to work.
- Strong written and verbal communication skills.
- Ability to work across global teams and time zones in a fast-moving public-company environment.
Benefits
- An inclusive culture grounded in FICO’s core values.
- Professional development opportunities and meaningful learning experiences.
- Competitive compensation, benefits and rewards programs.
- Support for work-life balance.
- Employee resource groups.
- Social and community events.
- Equal opportunities for employment and career advancement.