Internal Controls Oversight Lead

Company: Zip
Location: San Diego
Posted on: November 1, 2025

Job Description:

8–10 years of experience in SOX compliance, with significant ownership beyond the Finance domain (e.g., IT General Controls) Deep knowledge of SOX 302 & 404, COSO, internal controls frameworks, change management and risk assessment methodologies Remote-first opportunity for US-based employees with the option to work in-person out of our Manhattan office Start your adventure with Zip At Zip, we’re scaling responsibly while serving the everyday financial needs of Americans. To do this, we need a strong second line of defense that ensures our growth stands up to regulatory expectations, partner scrutiny, and our own high bar for trust. At Zip, success in this role means stepping into greater responsibility as we grow and scale. In the near term, the priority will be driving SOX compliance. The Internal Controls Oversight Lead will be responsible to design and operationalize Zip’s non-financial SOX control framework across our U.S. business. This role is critical to building a resilient, future-ready risk culture that fuels innovation instead of slowing it down. You’ll lead the end-to-end design and implementation of SOX controls across functions like Product, Engineering, Security, Legal, HR, and Compliance, ensuring that as Zip expands, our governance keeps pace with complexity. Interesting problems you’ll get to solve • Lead the design and implementation of internal/SOX controls across US non-financial domains including Product, Engineering, Security, Legal & Compliance, HR • Build Zip’s US 2nd Line SOX control framework aligned to COSO, PCAOB, and external audit standards • Drive enhancements to Zip’s internal control Framework and Standards to ensure alignment with SOX requirements • Conduct and lead US entity-level risk assessments to inform SOX scoping and control coverage, including preparing process flowcharts and Risk and Control Matrices (RACMs) • Partner with Finance SOX team to ensure alignment, reduce duplication, and coordinate evidence gathering • Create and execute control documentation, testing strategy, and gap remediation plans in collaboration with control owners • Collaborate with cross-functional teams to embed controls into business processes • Serve as the primary point of contact for non-financial SOX external audit testing and regulatory inquiries • Build and maintain a scalable SOX controls assurance and monitoring initiative • Operationalize compliance readiness as Zip scales - through control automation, policy refresh, and training rollouts • Collaborate with ANZ teams and external advisors to support firm-wide SOX activities What you’ll bring to the team • 8–10 years of experience in SOX compliance, with significant ownership beyond the Finance domain • Deep knowledge of SOX 302 & 404, COSO, internal controls frameworks, change management and risk assessment methodologies • Demonstrated experience designing, implementing, and scaling SOX programs in high-growth or tech-forward environments • Proven ability to lead risk assessments and translate findings into meaningful control structures • Experience working directly with external auditors, legal, security, and engineering stakeholders • Ability to drive alignment across technical and non-technical teams • Excellent written and verbal communication skills; clear documentation practices • Experience with audit management/ GRC tools a plus • CPA, CIA, or CISA certification preferred but not required What you’ll get in return Zip is a place where you’ll get out what you put in. The newness of our sector means we need to move at pace and embrace change, and our promise to you when you join the team is that you’ll feel empowered and trusted to make big things happen quickly. We want you to feel welcome and as though you have the support to be yourself, and care for yourself at work. Because it’s important to us that you make the most of the opportunities you’ll get to grow your skills and your career, and be surrounded by smart, friendly people and leaders that have your back. We think these are just some of the best things about being a Zipster. We will also offer you: • Flexible working culture • Incentive programs • 20 days PTO every year • Generous paid parental leave • Leading family support policies • 100% employer covered insurance • Beautiful Union Square office with a casual dress code • Learning and wellness subscription stipend • Company-sponsored 401k match

Keywords: Zip, San Diego , Internal Controls Oversight Lead, IT / Software / Systems , San Diego, California