Senior Analyst – Internal Audit, Risk

Spotify

Senior Analyst implementing audit strategy across product lifecycle at Spotify. Working on diverse tech projects and supporting SOX compliance in an agile environment.

Posted 5/18/2026full-timeNew York City • New York • 🇺🇸 United StatesSenior💰 $92,171 - $131,673 per yearWebsite

Tech Stack

Tools & technologies

CloudPythonSDLC

About the role

Key responsibilities & impact

Test technology components within the SOX framework, including planning, executing walkthroughs, reporting, and driving continuous improvements such as control rationalization.
Design, build, and iterate on internal audit & risk tooling and systems using AI agents, leveraging modern cloud-native architectures and generative AI models to drive execution.
Champion technology-enabled audit execution by embedding AI directly into core audit processes to deliver deeper, more effective results.
Develop a deep understanding of the businesses, products, and processes you are auditing, including their strategy, product lifecycle, and associated business processes.
Participate in complex assurance and advisory projects, covering risk assessment, testing, and reporting across various technical domains.
Coordinate with co-sourced providers, external auditors, and internal process owners to ensure the timely and effective execution of the SOX testing program and operational/technical audits.
Provide guidance and support to internal stakeholders as they address control deficiencies or make significant process changes, such as the implementation of new systems or product features.

Requirements

What you’ll need

You have at least 3 years of work experience
The majority should come from an engineering role or similar in high performing, cross-functional teams
Experience in technology audit, IT consulting and/or IT risk management is a merit, but not a requirement
You effectively use AI agents in your day-to-day work
At least basic experience in building AI systems or using AI powered coding assistants such as Claude Code or Cursor.
You have a solid understanding of modern software development lifecycles (SDLC)
Programming languages for AI development (Python)
Cloud infrastructure
You’re passionate about risk management and audit
Eager to learn and grow your auditing skills
You possess strong problem-solving skills
You care deeply about quality and hold yourself and others to a high standard
You hold a Bachelor’s degree in Computer Science, Software Engineering or a related field
Self-taught engineers holding another degree are also welcome to apply
Professional certifications (e.g., CISA, CISSP, CIA) are a merit but not a requirement

Benefits

Comp & perks

health insurance
six month paid parental leave
401(k) retirement plan
monthly meal allowance
23 paid days off
13 paid flexible holidays
paid sick leave

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

AI developmentPythoncloud infrastructuresoftware development lifecycle (SDLC)technology auditIT consultingIT risk managementcontrol rationalizationaudit executionrisk assessment

Soft Skills

problem-solvingquality assurancecommunicationcollaborationadaptabilityeagerness to learnstakeholder supportprocess improvementteamworkleadership

Certifications

CISACISSPCIA