About Shopify Opportunity is not evenly distributed. Shopify puts independence within reach for anyone with a dream to start a business. We propel entrepreneurs and enterprises to scale the heights of their potential. Since 2006, we’ve grown to over 8,300 employees and generated over $1 trillion in sales for millions of merchants in 175 countries.
This is life-defining work that directly impacts people’s lives as much as it transforms your own. This is putting the power of the few in the hands of the many, is a future with more voices rather than fewer, and is creating more choices instead of an elite option.
About you Moving at our pace brings a lot of change, complexity, and ambiguity—and a little bit of chaos. Shopifolk thrive on that and are comfortable being uncomfortable. That means Shopify is not the right place for everyone.
Before you apply, consider if you can:
Care deeply about what you do and about making commerce better for everyone
Excel by seeking professional and personal hypergrowth
Keep up with an unrelenting pace (the week, not the quarter)
Be resilient and resourceful in face of ambiguity and thrive on (rather than endure) change
Bring critical thought and opinion
Embrace differences and disagreement to get shit done and move forward
Work digital-first for your daily work
About the role We are looking to add a dynamic Manager, IT Audit to our growing team. This role will tackle complex issues, simplifying solutions, delivering projects and leading stakeholder interactions across Shopify’s technologies. You will identify automation and data insight solutions that make our work more efficient and provide deeper analysis.
Within Risk & Internal Audit, you will be an individual contributor helping to shape audit scope, design audit processes, and execute audit plans with precision and analytical rigor. You'll have the unique opportunity to thrive in an environment where expertise, innovation, and unconventional approaches are highly valued and where your influence will help Shopify facilitate risk taking in a responsible manner. You will provide an internal, independent, and unbiased health check on how strategic areas of technology risk are being managed across Shopify.
About the role:
Deliver Internal Audit assessments projects across Cybersecurity, Privacy, and Artificial Intelligence domains with a specific focus on complex, and highly-technical areas
Support operational audit efforts by contributing to IT considerations during planning, scoping, execution and issue management of audit & consulting engagements
Complete risk assessments of financial, data, and infrastructure systems to provide management insights into the design and effectiveness of controls to manage risk
Draft clear and meaningful findings, high quality audit reports, presentations, and other materials for Sr. Management and the Board
Manage project schedules and expectations of multiple cross-functional stakeholders, while maintaining strong relationships across multi-functional, global teams
Support continuous program improvements, including the continuous improvement of the internal audit methodology, processes, tools and templates
About you:
Proven experience leading and delivering risk, consulting or internal audit projects in the context of cybersecurity and privacy in a fast paced environment
Interest in working as a senior level individual contributor, influencing senior level stakeholders across Shopify
Experience in high-growth, global technology companies, or in a company leveraging a significant amount of technology
Degree in a related field (e.g. MIS, computer science, engineering, etc) or equivalent practical experience
Well established analytical and critical reasoning skills with the ability to analyze and synthesize complex problems and focus on what really matters
Ability to manage and deliver on multiple priorities in a fast-paced, deadline-oriented environment, overseeing the process and delivering on commitments
Ability to navigate and discuss complex issues with any level of management, while continuing to build trust and providing objective feedback
Ability to thrive in a fully remote, fast-moving, ambiguous, and constantly evolving work environment
A professional certification related to IT audit (e.g., CRISC, CISSP, CCSP, etc.), or you are currently working towards one
Proficiency in common programming languages (e.g., Python, SQL, Ruby)
Hands-on experience working with cloud technologies and DevSecOps tools, including the Google Cloud Platform (i.e. Compute Engine, Google Kubernetes Engine, Container Registry, Identity and Access Management)