Internal Audit Manager

As Senior Manager, Internal Audit focused on Audit Automation & Technology Risk, you’ll anchor our Internal Audit operations in Bangalore, India, and lead three connected areas: audit automation and innovation, people and operations for our India hub, and support of our technology risk audit program. Reporting to the VP, Internal Audit, you’ll help position Internal Audit as a strategic partner that gives leaders practical risk insight and helps the business improve. You’ll pioneer data analytics, artificial intelligence (AI)-assisted workflows, and automation across the Internal Audit function; support the performance and development of India-based audit team members; and partner closely with our US-based technology audit lead. You’ll also oversee Sarbanes-Oxley Act (SOX) testing performed by a co-source partner in Bangalore and build trusted relationships with engineering, information security, and information technology leaders. You'll bring dedicated leadership to our existing India-based audit team, bridging India and US working styles and strengthening how the hub operates day to day. This role requires regular overlap with US time zones to support real-time collaboration across our distributed team. What You’ll Do - Lead the design and adoption of AI-assisted workflows, data analytics, and automation across audit planning, evidence gathering, analysis, execution, and risk monitoring. - Oversee the Bangalore-based co-source provider and the day-to-day execution of SOX testing, including testing quality and issue escalation. - Partner with audit project leaders and Internal Audit leadership to identify opportunities to improve audit coverage, efficiency, and risk insight. - Build relationships with India-based engineering, information security, and information technology leaders to understand their roadmaps, risks, and priorities and inform audit plans and scopes. - Own assigned technology audit topics from scoping and planning through fieldwork, observation management, action planning, and reporting. - Oversee audit delivery across the India-based team by planning work, delegating responsibilities, coaching team members, and supporting high-quality, risk-informed outcomes. - Hire, onboard, develop, and retain India-based audit team members while fostering ownership, growth, engagement, and connection to GitLab’s mission. - Translate audit findings into clear business impact and work with stakeholders to develop practical solutions that strengthen product delivery, security, and operations. What You’ll Bring - Experience in technology audit and risk management, including managing audit team members or leading audit delivery in a distributed environment. - SOX internal controls expertise, including risk assessment, control scoping, testing program oversight, deficiency severity analysis, and improving testing processes. - Experience using data analytics, structured query language (SQL), Python, or similar tools to support audit work and automate operations. - Curiosity about AI agents and automation tools, with the ability to lead adoption of new ways of working that improve audit efficiency and coverage. - Knowledge of DevSecOps platforms, cloud infrastructure, continuous integration and continuous delivery (CI/CD) risk, information technology operations, and cybersecurity frameworks. - Experience designing and executing technology audits in fast-moving environments; software as a service, DevOps-focused, or technology company experience is helpful. - Experience leading or developing distributed, cross-geo teams - someone who understands regional context, can bridge India and US working styles and time zones, and can step into an established team as a trusted leader - A collaborative, service-focused approach to audit, with the ability to communicate business impact, build trusted relationships, manage competing priorities, and work independently in ambiguity. - A bachelor’s degree in Accounting, Information Technology, Computer Science, Finance, or a related field, plus an active relevant professional certification such as Certified Public Accountant (CPA), Certified Internal Auditor (CIA), Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified in Risk and Information Systems Control (CRISC), or an equivalent credential.