Internal Audit Manager - AppFolio, Inc

Hi, We’re AppFolio. 

We’re innovators, changemakers, and collaborators. We’re more than just a software company — we’re a cloud-based powerhouse that creates products to make our customers’ lives easier. We’re revolutionizing the way people do business, and we want your ideas, your enthusiasm, and your passion to help us keep on innovating.  We love where we work, and you can, too.

Data Analytics - Audit, Risk and Compliance

AppFolio seeks a dynamic audit and risk professional to help lead and transform our Risk-Based Internal Audit program. Be a part of building the forward-thinking, metrics-based Internal Audit (IA) function of the future. Build and support risk and compliance analytics outputs that are the cornerstone of providing risk assurance to senior management and our Board. Work with our business leaders and second-line functions, such as compliance, information security, and fraud departments, to build cross-functional dashboards that illustrate risk trends and inform our evolving internal audit plan. The role will report directly to the company’s VP of Internal Audit.

What You’ll Do:

Vision: 

• Work with the Chief Legal Officer, VP of Internal Audit, Chief Information Security Officer, Chief Compliance Officer, and other senior leaders to integrate Risk Analytics into Internal Audit activities.

• Work cross-functionally to develop data analytics that assess technology risks.

Risk Assessment:

• Help to develop and maintain an audit risk universe as the basis of risk assessment. The risk universe will link to enterprise risks and may contain operational and/or process risks.

• Coordinate with other risk functions to access (or build) dashboards illustrating the changing nature of risk. 

Audit Planning:

• Develop an audit plan that addresses top risks and maximizes the potential value that Internal Audit can bring to the business.

Coordination with other second-line functions:

• Develop a strategy to organize, retain and assess information from other risk and control groups, including Information Security, Fraud and Risk, Compliance, and third-parties.

 Engagement Planning and Execution:

• Conduct engagement risk assessments to determine focus areas and approach, understanding where analytics can be used to assess risk.

• Partner with Internal Audit team members to identify available data to assist in metric-based audits.

• Help lead the evolution and maturity of internal audit processes from manual and process focused to automated and data focused.

• Conduct integrated audits, addressing operational, process, and technology risks.

 Reporting and Follow-up:

• Work with management to identify the root cause of issues.

• Gather management action plans and clear all proposed activities with the business.

• Present final, detailed audits to senior management.

Qualifications

Data Analytics skills – able to identify, measure, model, and impact the important metrics needed to manage and monitor risks within our business.  Additionally able to build Tableau dashboards, launch exploratory analyses, gather and combine distributed data sources to create new insights. 

Enterprise Risk Management – understands how to assess risk factors in various business processes, including payments, screening, order to cash, and accounts payable. Identifies data driving the risk factors and builds models to show how changes in data impact risk.

Business acumen – understands key challenges facing our business and partners with key stakeholders to find creative ways to apply data science to solve them; connects dots between data & business outcomes, can work with senior leadership to take a project and be able to execute from start to finish

Attention to detail – appropriately checks all work for errors and does not let important details slip when it comes to data and its accuracy

Creative problem solving - able to use creativity and curiosity as tools to pick apart any problem, producing a solution that is relevant and realistic

Efficiency – able to quickly iterate on data generation and refinement. Look for ways to improve processes to maximize efficiency and remove redundancy

Requirements:

• Min bachelor’s degree with a preference in Economics, Statistics, Mathematics, Business & Management/MBA, Computer Science

• Six (6) or more years of experience in a combination of the following areas: Consulting, Risk and Compliance, Internal Audit, Research, Corporate Strategy, Data Science etc.

• Strong  SQL, dbt, Tableau, and Excel skills required.

• Data pipeline creation and design experience (ETL).

• Working knowledge of Salesforce suggested.

• Familiarity with github, software engineering best practices, machine learning techniques is a plus.

• Familiarization with Machine Learning techniques is a plus.

• Ability to support, work and communicate with a fast, cross-functional team.

• Excellent written and oral communication skills.

• Listening and interpersonal skills; ability to communicate ideas in both technical and business terms.

• Can work with leadership presenting and driving outcomes.

• Highly self-motivated and directed.

• Proven analytical and creative problem-solving abilities.

• Ability to effectively prioritize and execute tasks in a high-pressure environment.

Nice to Have: 

• AWS S3 experience
• Experience combining and collating SQL logic for consolidation of federated reporting processes (This is going to be one of the most time-consuming, difficult aspects of the work, reading other people’s code, editing it, and reporting on it in a correct/appropriate fashion.)

Compensation & Benefits

The base salary that we reasonably expect to pay for this role is $114,400-$143,000.

The actual base salary for this role will be determined by a variety of factors, including but not limited to the candidate’s skills, education, experience, etc.

Please note that base pay is one important aspect of a compelling Total Rewards package. The base pay range indicated here does not include any additional benefits or bonuses/commissions that you may be eligible for based on your role and/or employment type.

Regular full-time employees are eligible for benefits - see here.

#