Senior Manager, Internal Audit

Navan is looking for a talented Senior Manager, Internal Audit to join us in the San Francisco Bay Area.  The Internal Audit Senior Manager is responsible for executing risk-based internal audits, assisting the Sarbanes-Oxley (SOX) compliance program, and providing risk advisory support for strategic initiatives across Navan. This role partners closely with management and external service providers to evaluate and strengthen internal controls while identifying opportunities to improve operational effectiveness and risk management across the organization. The Senior Manager will lead complex audit engagements, support enterprise risk management activities, assist with Board and Audit Committee reporting, and provide advisory support on strategic initiatives. This position reports to the VP, Head of Audit, Risk, and Compliance and will have significant exposure to executive leadership.

What You’ll Do:

Audit Leadership

• Lead planning, execution, and reporting of operational, financial, compliance, and integrated audits.
• Assist with risk assessments and the development of the annual audit plan.
• Evaluate effectiveness of governance, risk management, compliance, and internal control processes.
• Identify root causes of control deficiencies and operational inefficiencies.
• Develop practical recommendations that improve risk management and business performance.

SOX Program Assistance

• Assist with the Company’s SOX compliance program, including planning, scoping, risk assessment, testing strategy, and reporting.
• Coordinate and oversee activities performed by co-sourced internal audit providers.
• Review control testing workpapers and challenge conclusions where appropriate.
• Partner with process owners to evaluate control design and operating effectiveness.
• Monitor remediation of control deficiencies and track progress through resolution.
• Coordinate activities among management, external auditors, and co-sourced resources.
• Support annual management assessment of internal controls over financial reporting.

Team and Co-Sourced Resource Leadership

• Lead, mentor, and coordinate internal audit staff and co-sourced resources in day-to-day audit and SOX testing activities.
• Manage co-sourced engagements, including budgets, timelines, deliverables, and coordination between internal stakeholders and external service providers.
• Review workpapers and reports to ensure quality, consistency, and adherence to audit methodology and documentation standards.
• Identify opportunities to improve team effectiveness and maximize the value of co-sourced arrangements.
• Promote continuous improvement, including the effective use of data analytics and AI-enabled audit techniques.

Strategic Advisory

• Partner with management on major transformation initiatives, ERP implementations, automation efforts, and business process redesign.
• Provide risk-focused advisory services without assuming management responsibility.
• Assist project teams in proactively identifying risks that may impact successful delivery of strategic objectives.

Stakeholder Engagement

• Build trusted relationships with senior leaders across the company.
• Present audit results and recommendations to executive leadership.
• Support Audit Committee communications and reporting.

Risk Management

• Partnering with the enterprise risk management leader and supporting related initiatives.
• Monitor emerging risks across operations, technology, cybersecurity, regulatory compliance, and global supply chains.

What We’re Looking For:

• 8-10 years of progressively responsible experience in IT or internal audit, SOX compliance, public accounting, risk management, or a related field.
• At least 5 years in a leadership role, including leading audit engagements, programs, or teams.
• Significant experience leading operational and technology audits from planning and scoping through testing, reporting, and remediation follow-up.
• Experience leading or managing IT SOX compliance for a publicly traded company, including IT general controls, automated controls, segregation of duties, and deficiency evaluation.
• Experience assessing control design and operating effectiveness and supporting timely, sustainable remediation.
• Experience coordinating with external auditors, consulting firms, and co-sourced service providers.
• Experience supervising audit professionals, reviewing work products, and providing clear direction and feedback.
• Demonstrated ability to engage independently with director-, vice president-, and executive-level stakeholders and communicate complex risk and control matters clearly.
• Experience preparing audit reports and presenting results and recommendations to senior management.
• Strong knowledge of internal control and risk frameworks, including the COSO Internal Control—Integrated Framework, SOX Section 404 requirements, and risk assessment methodologies.
• Understanding of IT control environments, including access management, change management, IT operations, and controls over cloud and SaaS applications.
• Ability to travel domestically and internationally as business needs require.

Education

• Bachelor’s degree in Accounting, Finance, Business Administration, Information Systems, or a related field required.
• MBA or master’s degree in Accounting, Finance, or a related discipline preferred.

Professional Certifications

• Required: Hold an active Certified Internal Auditor (CIA) credential issued by The Institute of Internal Auditors, or an active Certified Public Accountant (CPA) license issued by a state board of accountancy.
• Preferred: CPA preferred; candidates holding both the CPA and CIA credentials are highly preferred.

Preferred Experience

• Experience in the fintech, financial services, or travel industry.
• Big Four public accounting experience.
• Experience with AI systems or AI governance, ERP implementations, data analytics, or enterprise risk management.
• Experience with NetSuite, Salesforce, FloQast, and/or AuditBoard/Optro.
• Familiarity with data analytics tools and AI-enabled auditing techniques.