IT Controls Engineer, Enterprise Applications

Gusto is on a mission to grow the small business economy, handling payroll, health insurance, 401(k)s, and HR for over 500,000 small businesses nationwide. With teams in Denver, San Francisco, and New York, Gusto is building a workplace that reflects the people it serves.

As the IT Controls Engineer, you will own, evolve, and scale IT General Controls (ITGCs) across Gusto's enterprise application ecosystem including NetSuite, Workday, Salesforce, and adjacent platforms. You will serve as the single point of accountability for ITGC design, testing, remediation, and audit readiness, partnering with Internal Audit, IT, Security, and Finance to ensure SOX 404 compliance. This is a senior, high-impact individual contributor role that blends deep IT controls expertise with a forward-looking vision for AI-augmented assurance.

• Own ITGC design and operation across enterprise applications, including logical access, change management, SDLC, computer operations, and segregation of duties (SoD).
• Lead the 1st-line control environment, drive SoD strategy across ERP, HRIS, and CRM, and manage the audit lifecycle as the primary 1st-line liaison with Internal Audit, External Audit, and the SOX PMO.
• Build AI-native continuous controls monitoring, including LLM-based evidence review, agentic control testing, and automated anomaly surveillance.
• Own the controls posture for Gusto's internal AI and automation portfolio, lead access governance, govern application change management, and mature the controls program.

• 10+ years of experience in IT controls, audit, or enterprise applications governance, with hands-on background as a control owner across NetSuite, Workday, and/or Salesforce.
• Deep expertise in SOX 404, COSO, COBIT, and ITGC frameworks.
• Proven track record leading external audit engagements.
• Demonstrated experience building AI-augmented controls, including agents, LLM-based reviewers, or automated anomaly detection.
• Strong judgment on AI risk, including model risk, prompt injection, output validation, and audit trail design.
• Excellent communicator. Relevant certifications (CISA, CISSP, CIA, CPA) are a plus.

Cash compensation for this role is targeted at $245,000-$265,000 /yr for San Francisco, Seattle & New York, and $205,000-$220,000 /yr for Denver & most remote locations. Final offers may vary based on experience.

All full-time employees receive competitive base pay, benefits, and equity (RSUs).

Apply via the Gusto Greenhouse job posting.