The ad says“An active CPA, CIA, or CISA, and a bachelor’s degree in Accounting, Finance, Information Systems, or a related field”
The ad says“An active CPA, CIA, or CISA, and a bachelor’s degree in Accounting, Finance, Information Systems, or a related field”
The ad says“An active CPA, CIA, or CISA, and a bachelor’s degree in Accounting, Finance, Information Systems, or a related field”
The ad says“Experience building continuous monitoring or automated testing capabilities within an audit or SOX program”
The ad says“Understanding of consumer finance regulatory frameworks including TILA, ECOA, UDAAP, FCRA, and GLBA, and of BSA/AML audit requirements”
The ad says“Deep technical command of COSO 2013, SOX 302 and 404, PCAOB AS 2201, the IIA framework, ITGC frameworks, and risk-based audit methodology, including inherent vs. residual risk and deficiency severity evaluation”
The ad says“Understanding of consumer finance regulatory frameworks including TILA, ECOA, UDAAP, FCRA, and GLBA, and of BSA/AML audit requirements”
The ad says“Understanding of consumer finance regulatory frameworks including TILA, ECOA, UDAAP, FCRA, and GLBA, and of BSA/AML audit requirements”
The ad says“Understanding of consumer finance regulatory frameworks including TILA, ECOA, UDAAP, FCRA, and GLBA, and of BSA/AML audit requirements”
The ad says“Deep technical command of COSO 2013, SOX 302 and 404, PCAOB AS 2201, the IIA framework, ITGC frameworks, and risk-based audit methodology, including inherent vs. residual risk and deficiency severity evaluation”
The ad says“Deep technical command of COSO 2013, SOX 302 and 404, PCAOB AS 2201, the IIA framework, ITGC frameworks, and risk-based audit methodology, including inherent vs. residual risk and deficiency severity evaluation”
The ad says“Deep technical command of COSO 2013, SOX 302 and 404, PCAOB AS 2201, the IIA framework, ITGC frameworks, and risk-based audit methodology, including inherent vs. residual risk and deficiency severity evaluation”
The ad says“Deep technical command of COSO 2013, SOX 302 and 404, PCAOB AS 2201, the IIA framework, ITGC frameworks, and risk-based audit methodology, including inherent vs. residual risk and deficiency severity evaluation”
The ad says“Deep technical command of COSO 2013, SOX 302 and 404, PCAOB AS 2201, the IIA framework, ITGC frameworks, and risk-based audit methodology, including inherent vs. residual risk and deficiency severity evaluation”
The ad says“Deep technical command of COSO 2013, SOX 302 and 404, PCAOB AS 2201, the IIA framework, ITGC frameworks, and risk-based audit methodology, including inherent vs. residual risk and deficiency severity evaluation”
The ad says“Understanding of consumer finance regulatory frameworks including TILA, ECOA, UDAAP, FCRA, and GLBA, and of BSA/AML audit requirements”
The ad says“Understanding of consumer finance regulatory frameworks including TILA, ECOA, UDAAP, FCRA, and GLBA, and of BSA/AML audit requirements”
We’re looking for a Head of Internal Audit & SOX to lead and continue building our internal audit and SOX program from the ground up. This is Avant’s top internal audit role — you’ll be the principal advisor to the Board’s Audit, Risk and Compliance Committee (ARCC) on the strength of our control environment
There’s a limited existing program to inherit. You’ll have the autonomy to build a robust program, evolving Avant’s framework with the same rigor and judgment you’d bring to a fully established audit function
This role sits within Finance and reports directly to the ARCC. The Committee approves your annual audit plan, receives your quarterly reporting, and meets with you in executive sessions without management present
Our bank partners, regulators, and Board expect real rigor around controls. In this seat, you decide what gets audited, drive timely remediation, and give the Board a clear, unvarnished view of risk — a big part of how seriously Avant addresses regulatory risk as a lender
Own the Board relationship: Partner directly with the ARCC Chair to approve audit plans, deliver quarterly reporting on control health, and escalate critical risks
Set audit and SOX strategy: Define the audit charter, methodology, and resourcing model. Own the enterprise risk assessment and establish a risk-based audit plan for financial reporting, technology, third-party, and regulatory compliance—keeping it current as the business evolves while building a roadmap to sustained SOX 302/404 compliance
Build and lead the function: Recruit talent and manage co-source partners. Oversee scoping, walkthroughs, testing, deficiency evaluation, and reporting
Establish evidence-retention standards and risk-control matrices while leveraging GRC tools, data analytics, automated testing, and continuous monitoring to scale coverage
Drive remediation governance: Track control deficiencies from identification to validated closure, monitoring aging and high-risk findings, enforcing root-cause resolution, and escalating material delays to leadership and the ARCC
Operate as a trusted partner: Collaborate closely with executive leadership and partners across Finance, Accounting, Technology, Product, Legal, Compliance, and Enterprise Risk to support business goals while maintaining independence
Benefits
401(k) Match
Choice of great medical, dental, and vision insurance plan options
Unlimited paid time off
Fun in-office and virtual social events
Summer fridays
No meeting wednesdays - (a.k.a. planned time to Get Sh!t Done)
Access to LinkedIn Learning for professional development
WFH stipends for our remote employees
Lunch allowance (Fooda) and in-office snacks
Generous paid parental leave
Flexible work environment
(And who doesn’t love the swag)
Preferred experience
A proven track record of building or materially rebuilding an internal audit function or SOX program from an early or undefined state — not just operating within one someone else built
Direct experience owning the relationship with an audit committee or board — you’ve built the materials, delivered the readout, defended the plan, and handled tough questions from senior people in the room
15+ years in internal audit, SOX, or internal controls, including at least 4 years leading an audit function or SOX program at a Director level or above
Deep technical command of COSO 2013, SOX 302 and 404, PCAOB AS 2201, the IIA framework, ITGC frameworks, and risk-based audit methodology, including inherent vs. residual risk and deficiency severity evaluation
An active CPA, CIA, or CISA, and a bachelor’s degree in Accounting, Finance, Information Systems, or a related field
A direct communication style and good judgment about what belongs in front of the Board, with the independence to hold a position under pressure
Background in a regulated financial services environment — banking, lending, fintech, or payments; bank partnership oversight or consumer lending regulation is a strong plus
A genuine player-coach mindset — willing to write the risk assessment, run walkthroughs, and execute testing yourself, especially while the function is being built
We invite you to apply to our positions even if you do not meet 100% of the qualifications listed in the description. If you’re passionate about our mission and aligned to our values, we hope you’ll come contribute to our awesome culture
Experience managing a co-sourced audit partner or offshore delivery model against a defined scope and budget
Understanding of consumer finance regulatory frameworks including TILA, ECOA, UDAAP, FCRA, and GLBA, and of BSA/AML audit requirements
Experience building continuous monitoring or automated testing capabilities within an audit or SOX program
