Director, SOX Compliance & Internal Controls

Location: Oakland, California, United States, AMER From Fivetran’s founding until now, our mission has remained the same: to make access to data as simple and reliable as electricity. With Fivetran, customer data arrives in their warehouses, canonical and ready to query, with no engineering or maintenance required. We’re proud that more organizations continue to leverage our technology every day to become truly data-driven. About Us Fivetran and dbt Labs are bringing together two industry-leading companies with a shared mission: helping organizations unlock the full value of their data. Together, we’re delivering the data infrastructure layer that helps organizations move, transform, and trust their data — from the moment data moves, through every transformation, to the context teams and AI systems rely on. Fivetran helps organizations automate data movement across the systems, clouds, engines, and tools they rely on. dbt Labs pioneered analytics engineering, helping teams transform data into reliable, governed insights. Together, we support thousands of organizations as they build a trusted foundation for analytics, AI, and better business decisions. As we bring our teams and technology together, we’re building on the strengths of both companies while continuing to deliver the products and experiences our customers know and trust. It’s an exciting time to join us: we’re creating a company with the scale, talent, and technology to help more organizations put their data to work with greater speed, confidence, and impact. During this transition period, you may see references to both Fivetran and dbt Labs throughout our recruiting process as we integrate our teams, systems, and career sites. About the Role Fivetran is building a SOX Compliance function from the ground up. Reporting directly to the Chief Accounting Officer (CAO), the Director, SOX Compliance & Internal Controls will design and stand up Fivetran’s internal controls program using the COSO framework. This will include risk and control matrices (RCMs), narratives, and test plans for both business process controls and IT application controls/IT general controls (ITACs/ITGCs). The individual will own the relationship with third-party control-testing providers and the external audit team (KPMG) as the company moves through its SOX readiness and 404(a) compliance. This is a highly visible, build-phase mandate. You will have significant latitude and accountability to shape the control environment, tooling, and governance model that Fivetran will operate on. You will partner closely with Accounting, India CoE, FP&A, Legal, HROps, Revenue, IT/Engineering, Security, and every control owner across the business. This is a full-time, hybrid position based out of our Oakland, CA office. Our hybrid work model offers a blend of remote flexibility and in-person collaboration, including one day in the office each week to connect and build as a team. What You’ll Do SOX Program Build & Governance ▪ Design, build, and lead Fivetran’s end-to-end SOX 404 compliance program in accordance with the COSO 2013 framework and 404(b) integrated audit standards. ▪ Lead the risk assessment and scoping process (significant accounts, processes, and locations) in partnership with the external auditors. ▪ Build and maintain the company’s risk and control matrices (RCMs), process narratives, and flowcharts across key financial processes, including order-to-cash/revenue, procure-to-pay, payroll and equity compensation, treasury, financial close and reporting, tax and entity-level controls. ▪ Design and document control activities (preventive and detective, manual and automated) that are efficient, right-sized, and audit-ready. ▪ Build a SOX/GRC workflow tool using AI to manage controls, testing, issues, and evidence. ITGC / ITAC & IT Risk ▪ Partner with Engineering, IT, and Security to design and test IT general controls (access management, change management, computer operations/backups) and IT application controls (automated controls, interfaces, system-generated reports/IPE) across in-scope systems (NetSuite, Coupa, Salesforce CRM, Workday, data warehouse, AI-agents built using frontier AI models and other SaaS solutions). ▪ Build segregation-of-duties (SoD) analysis and monitoring across key financial systems. ▪ Serve as the trusted advisor to technical teams on control design for new systems, integrations, and process changes, including evaluating SOC 1/SOC 2 reports from key vendors and determining reliance. Testing, Third Parties & External Audit ▪ Develop test plans and testing strategies (design and operating effectiveness) for all in-scope controls, both business-process and ITGC/ITAC. ▪ Engage, manage, and oversee third-party co-source/outsource providers performing SOX control testing, including scoping the engagement, setting standards for workpaper quality, and reviewing their results before sharing with external auditors. ▪ Own the primary relationship with KPMG (external auditor) for all SOX/ICFR matters, coordinate walkthroughs, manage the PBC (prepared-by-client) request list, present testing results and evidence, and resolve open items in real time. ▪ Track, evaluate, and drive remediation of control deficiencies (design and operating) through to closure, including root-cause analysis and retesting; assess and present deficiency severity (deficiency / significant deficiency / material weakness) to management. ▪ Prepare periodic reporting on SOX program status, testing results, and open issues for the CAO, CFO, and ultimately the Audit Committee. Business Partnership & Enablement ▪ Act as the organization’s go-to resource on internal controls, including training and coaching control owners on their responsibilities, control execution, and evidence standards. ▪ Embed controls into new processes, systems, and M&A integrations as the company grows, favoring automation and “preventive at the source” design over manual detective controls. ▪ Monitor changes in the business (new products, new systems, new revenue streams, acquisitions) for control impact and update scoping/documentation accordingly. ▪ Build the long-term operating rhythm as the SOX program matures, which includes quarterly control self-assessments, quarterly sales questionnaire, related party certifications, etc. Skills We're Looking For ▪ 10+ years of progressive experience in internal audit, SOX/internal controls, or external audit, including meaningful time in public accounting (Big 4 or large national firm) with a SOX/ICFR, IT audit, or integrated audit focus. ▪ Demonstrated experience either taking a company through IPO/SOX readiness and a first-year 404(b) audit, or leading an established public-company SOX program at technology/SaaS industry strongly preferred. ▪ Deep, hands-on knowledge of the COSO Internal Control Integrated Framework and PCAOB auditing standards. ▪ Strong command of both business process controls (O2C, P2P, R2R, Payroll & Equity, Treasury, Tax) and ITGC/ITAC concepts. Able to converse credibly with engineers on system architecture and control design, not just with accountants. ▪ Direct experience managing or co-sourcing control testing with third-party providers, and owning the day-to-day relationship with a Big 4 external audit team. Bonus Skills​ ▪ Preferred Bachelor’s degree in Accounting, Finance, or related field. ▪ CPA, CIA, and/or CISA certification. ▪ Experience with NetSuite (or comparable ERP), Salesforce, and modern data/billing stacks typical of a usage-based business. ▪ Prior experience as the first or founding SOX hire at a pre-IPO company (building the function from zero). ▪ Familiarity with SOC 1 Type II report evaluation and vendor/subservice organization risk. ▪ Project management skills (PMP/PMO exposure a plus) given the scoping, timeline, and cross-functional coordination demands of a readiness program. #LI-SR1 #LI-Remote The compensation range displayed on this job posting reflects the minimum and maximum target for new hire compensation for the target position and level, and may include sales incentives or target bonuses depending on the role.  Our compensation ranges are determined by role, level, and location. Our job titles may span more than one career level. Within the range, individual compensation is determined by additional factors, including job-related skills, experience, relevant education or training, business need, market demands. The compensation range is subject to change and may be modified in the future. Your recruiter can share more about the specific compensation range for your location during the hiring process. Pay Range $180,830 — $226,037.50 USD Perks and Benefits 100% employer-paid medical insurance * Generous paid time away from work, including paid vacation or flexible/unlimited vacation depending on role and country, plus paid sick time, inclusive parental leave, paid holidays, including a year-end Global Week of Rest, and volunteer days off. RSU stock grants* Professional development and training opportunities Company virtual happy hours, free food, and fun team-building activities Monthly cell phone stipend Access to an innovative mental health support platform that offers personalized care and resources in areas such as: therapy, coaching, and self-guided mindfulness exercises for all covered employees and their covered dependents. * May vary by country and worker type - please reach out to your recruiter for more information Click here to learn more about Fivetran's Benefits by Region. We’re honored to be valued at over $5.6 billion , but more importantly, we’re proud of our core values of Get Stuck In, Do the Right Thing, and One Team, One Dream . Read about us in Forbes . Fivetran brings together high-quality talent across the globe to make data access as easy and reliable as electricity for our customers. We value and recognize that our customers benefit from having innovative teams made of people from many backgrounds, experiences, and identities. Fivetran promotes diversity, equity, inclusion & belonging through attracting, recruiting, developing, and retaining a diverse workforce, not only because it is the right thing to do, but because it helps us build a world-class company to better serve our customers, our people and our communities. To learn more about Fivetran’s culture and what it’s like to be part of the team, click here and enjoy our video. To learn more about our candidate privacy policy, you can read our statement here . We are committed to ensuring that all candidates have an equal opportunity to participate in our interview process. If you require accommodations at any stage of the process due to a disability, medical condition, or any other circumstance, please don't hesitate to submit your request by filling out this form . We will work with you to provide reasonable accommodations to facilitate your participation and ensure a fair and accessible interview experience. Your request and any information provided will be kept confidential and will not impact your candidacy. We look forward to hearing from you and accommodating your needs to the best of our ability.