Coupa makes margins multiply through its community-generated AI and industry-leading total spend management platform for businesses large and small. Coupa AI is informed by trillions of dollars of direct and indirect spend data across a global network of 10M+ buyers and suppliers. We empower you with the ability to predict, prescribe, and automate smarter, more profitable business decisions to improve operating margins.

Why join Coupa?

• Pioneering Technology: At Coupa, we're at the forefront of innovation, leveraging the latest technology to empower our customers with greater efficiency and visibility in their spend.
• Collaborative Culture: We value collaboration and teamwork, and our culture is driven by transparency, openness, and a shared commitment to excellence.

• Audit Planning and Execution
• Develop and manage the annual audit plan for product and customer-required assessments, including ISO 27001, SOC 2, PCI DSS, HIPAA, C5, GDPR, and others.
• Coordinate with internal teams and external auditors to prepare for and execute audits.
• Ensure all required documentation, evidence, and processes are in place to meet audit and attestation requirements.
• Track and resolve audit findings and ensure timely remediation of identified gaps.
• Stakeholder Collaboration
• Act as the primary point of contact for external auditors, assessors, and certification bodies.
• Collaborate with internal teams, including IT, Security, Product, and Legal, to gather evidence, address audit requirements, and implement controls.
• Liaise with customer-facing teams to address customer audit and certification inquiries.
• Audit and Evidence Management
• Oversee the collection, review, and organization of audit evidence to ensure accuracy and completeness.
• Maintain a centralized repository for audit documentation, including findings, evidence, and remediation plans.
• Ensure readiness for audits by continuously monitoring control effectiveness and compliance status.
• Reporting and Metrics
• Develop and deliver audit reports, dashboards, and metrics to leadership, summarizing audit outcomes, trends, and risks.
• Track and report on the status of remediation efforts and continuous improvement initiatives.
• Continuous Improvement
• Identify opportunities to enhance audit processes, tools, and methodologies to improve efficiency and effectiveness.
• Stay updated on emerging audit standards, technologies, and best practices to ensure the organization's audit program remains robust and competitive.

• Audit Coordination
• Plan and schedule audits and assessments, coordinating with internal teams and external auditors.
• Monitor audit progress, ensuring timely completion of activities and deliverables.
• Evidence Management
• Collect and review evidence to support compliance with audit requirements.
• Maintain audit documentation and ensure evidence meets external auditor expectations.
• Stakeholder Engagement
• Host regular meetings with auditors, assessors, and internal stakeholders to ensure alignment on audit requirements.
• Address customer inquiries related to product certifications and attestations.
• Remediation Tracking
• Monitor the implementation of corrective actions for audit findings.
• Validate remediation efforts and update audit documentation accordingly.
• Reporting and Continuous Improvement
• Prepare and deliver audit status reports, metrics, and findings to leadership.
• Recommend and implement process improvements to streamline audit readiness and execution.

• Education:
• Preferred Bachelor's degree in Computer Science or Cybersecurity or equivalent experience.
• Experience:
• A minimum of 7 years of experience in technology, software, or infrastructure management.
• Demonstrated success in leading teams and managing high-pressure projects, including those requiring complex cross-functional collaboration and escalation.
• Certifications:
• Preferred certifications include CISA, CISSP, CRISC, ISO 27001 Lead Auditor, PMP, ITIL, Security+ or similar credentials.
• Audit Expertise:
• Strong understanding of audit processes, evidence collection, and compliance requirements for multiple frameworks.
• Project Management:
• Ability to manage complex audit schedules, coordinate teams, and track deliverables.
• Collaboration and Communication:
• Excellent verbal and written communication skills to engage with auditors, stakeholders, and leadership.
• Analytical Skills:
• Ability to identify control gaps, assess risks, and recommend corrective actions.
• Attention to Detail:
• High degree of accuracy in managing audit evidence and documentation.
• Knowledge of Frameworks:
• Familiarity with industry standards such as ISO 27001, SOC 2, PCI DSS, GDPR, HIPAA, and C5.

• Completion rates of scheduled audits and certifications on time and within scope.
• Reduction in audit findings and repeat issues over time.
• Accuracy and completeness of audit evidence submissions.
• Timeliness of remediation for identified audit gaps.
• Stakeholder satisfaction with audit processes and outcomes.