Director of Internal Audit | United States | Remote

Grafana Labs Grafana Labs · Data AI · United States · Remote · Finance

This role establishes and leads the internal audit function for Grafana Labs, focusing on governance, risk management, and controls. It involves designing a risk-based audit program, leveraging data analytics and AI tools for efficiency, and assessing AI-related risks. The role partners with various teams, evaluates internal controls (including SOX-readiness), presents findings, and monitors emerging risks. The Director will also build and mentor the internal audit team.

What you'd actually do

  1. Establish and lead the internal audit function, including defining the audit charter, methodology, and annual audit plan
  2. Develop and execute a risk-based internal audit program covering financial, operational, technology, compliance, and strategic risks
  3. Leverage data analytics and AI-enabled tools to enhance audit planning, testing, and continuous monitoring
  4. Assess risks and controls related to the company’s use of AI and automation, including governance, data quality, model risk, security, and ethical considerations
  5. Partner closely with leadership, Finance, Legal, Security, IT, Engineering, and Product teams to understand the business and provide actionable insights

Skills

Required

  • 10+ years of progressive experience in internal audit, risk management, or public accounting, including leadership experience
  • Experience building or transforming an internal audit function, ideally in a high-growth technology or SaaS environment
  • Demonstrated experience using data analytics and/or AI tools to improve audit efficiency, coverage, or insight
  • Strong understanding of risks associated with AI, automation, and advanced technologies, and how to assess related controls and governance
  • Solid knowledge of internal controls, risk assessment, and governance frameworks
  • Comfort operating in a fast-moving, less-structured environment with evolving processes
  • Excellent communication skills - able to influence, not just report
  • Proven ability to partner with senior leaders while maintaining independence and objectivity

Nice to have

  • CPA, CIA, CISA, or similar certification
  • Experience supporting a company preparing for public company ready or operating as a public company
  • Familiarity with AI governance frameworks, model risk management, or responsible AI principles
  • Experience auditing cloud-native environments, data platforms, or information security programs
  • Experience working in globally distributed organizations

What the JD emphasized

  • building from scratch
  • AI-enabled tools
  • risks and controls related to the company’s use of AI and automation
  • SOX-readiness
  • emerging risks (e.g., cybersecurity, privacy, AI/ML use cases, global operations, SaaS revenue models)
  • AI governance frameworks
  • model risk management
  • responsible AI principles