Senior Director, Internal Audit

DoorDash · San Francisco

Finance & Legalposted 9mo ago

About the Team

DoorDash’s Internal Audit team provides independent assurance that the company’s risk management, governance, and internal control processes are operating effectively. We are a small team that is looking to expand and bring on motivated professionals. We don’t think of ourselves as a typical audit function - we are obsessively focused on risks to the organizations which reflects in the type of projects we support and execute.

DoorDash is rapidly growing - we are expanding in multiple geos and launching new products. This exciting growth allows us to drive creative analysis, strategy, and solutions. Our focus areas include financial, operational, regulatory, security, IT, and more.

About the Role

We are seeking a Senior Director, IT Internal Audit to lead the strategy, execution and evolution of DoorDash’s global IT audit function. In this highly visible role, you will help shape the technology risk management practices across DoorDash - you will oversee a broad portfolio of audits, including IT SOX, cybersecurity, data governance, AI governance, and operational technology. You will report directly to the Chief Audit Executive and serve as a strategic advisor to DoorDash’s technology, security, and engineering leaders. You will bring deep technical audit expertise, exceptional leadership skills, and a passion for innovation to build and lead a world-class IT audit organization that scales with the business.

This role demands someone who can balance strategy with execution (and isn’t afraid to roll up their sleeves) — a leader who can anticipate emerging technology risks, foster strong cross-functional partnerships, translate complex technical concepts into meaningful business insights, and be ready to operate at the lowest level of detail. You will partner with teams across Security, Platform Engineering, Data Engineering, Privacy Legal, AI, Product, and Compliance to strengthen our risk posture and drive a data-driven approach to auditing.

You’re excited about this opportunity because you will…

Lead the strategic direction of IT Internal Controls and Assurance

Define and execute a forward-looking IT Internal Audit strategy aligned with DoorDash’s business goals and technology roadmap.
Partner with executive leadership to identify, assess, and monitor key technology risks, including those tied to digital transformation and AI adoption.
Collaborate closely with business and engineering leaders to understand their strategic objectives and provide guidance on navigating IT compliance in a practical, business-first focused manner.
Shape the annual IT audit plan to strike the right balance between compliance, operational resilience, and innovation.
Drive the use of data analytics and automation to expand audit coverage and deliver more impactful insights.

Drive Global IT SOX Excellence

Oversee DoorDash’s global IT SOX compliance program, maintaining a strong and scalable control environment across our complex and evolving technology landscapes.
Act as a trusted partner to external auditors and the Audit Committee, ensuring transparency, alignment, and continuous improvement in IT governance.
Foster a proactive control mindset by embedding governance principles into how technology is designed, built, and operated - , ensuring systems are secure and compliant by design.
Promote consistent standards of risk awareness and system reliability across all financial and technology environments.

Shape AI and Machine Learning Governance

Establish and lead the development of DoorDash’s AI and ML audit strategy, focusing on accountability, fairness, data ethics, and regulatory compliance.
Partner with AI Governance and technology leaders to define principles for model risk management and AI lifecycle assurance.
Serve as a thought leader on emerging technology and AI risk, representing Internal Audit with senior stakeholders
Drive the integration of AI risk considerations into the broader enterprise risk framework.

Strengthen Enterprise Data Governance & Trust

Provide strategic oversight of audits focused on data governance, privacy, and information integrity.
Partner with data, security, and privacy leaders to build an enterprise-wide data control framework that supports business growth while meeting compliance requirements.
Champion a culture of data accountability and transparency, ensuring that data-driven decisions are built on reliable, well-controlled infrastructure.
Promote the adoption of scalable tools and metrics to monitor data risk and enable proactive remediation.

Elevate IT Operational and Transformation Audits

Oversee global IT operational audit programs focused on systems resilience, change management, and technology modernization.
Anticipate and assess risks tied to major platform migrations, automation initiatives, and global expansion projects.
Partner with technology and business leaders to embed risk management principles into digital transformation and product lifecycle initiatives.

Lead Cybersecurity Assurance Oversight

Shape and lead DoorDash’s global cybersecurity audit and assurance program.
Provide meaningful insights on cybersecurity threat posture, vulnerability management, and incident readiness to leadership and the Audit Committee.
Partner with Global Security Governance and Privacy teams to ensure alignment with frameworks such as NIST, ISO 27001, and SOC 2, and emerging regulatory standards.
Establish a proactive, analytics-based approach to monitor cybersecurity risks and strengthen organizational resilience.

Leadership & Team Development

Lead, mentor, and develop a global team of IT and cybersecurity auditors, empowering them to grow and deliver impactful work
Manage co-sourced partners to ensure high-quality deliverables and alignment with DoorDash’s culture and goals.
Foster a collaborative, inclusive, and high-performing environment where innovation, curiosity and critical thinking thrive.

Governance & Communication

Drive the preparation and presentation of IT audit findings, insights, and recommendations to the Audit Committee and executive leadership.
Collaborate with external auditors to coordinate audit activities, drive efficiency, and avoid overlap or duplication of efforts
Contribute to enterprise risk management and other strategic initiatives that strengthen DoorDash’s overall control environment and governance maturity.

We’re excited about you because…

You have 15+ years of progressive experience in internal audit, IT audit, or risk management within a complex, global, fast-paced, technology-driven environment.
You have deep technical expertise in IT controls, ITGC, data governance, cybersecurity, cloud architecture, systems implementation, and emerging tech risks (AI/ML, privacy, automation).
You are a hands-on leader with the ability to roll up your sleeves to operationalize IT compliance initiatives, drive execution, and ensure practical implementation of governance and control frameworks.
You have a proven ability to oversee the governance of complex, cross-functional system implementations, ensuring alignment with enterprise control frameworks, risk management objectives, and business outcomes.
You are skilled in leveraging automation and next-generation technologies (e.g. GenAI) to enhance audit efficiency, expand coverage, and deliver deeper, data-driven insights.
You have demonstrated the ability to navigate and assess complex technical and control environments, diagnose underlying issues, and design tailored, effective solutions suited to dynamic marketplace platforms.
You have proven leadership experience building and leading high-performing, geographically distributed teams and managing third-party co-source providers.
You have strong familiarity with frameworks such as COSO, COBIT, NIST, ISO 27001, ISO 420001, SOC 2, PCI DSS, and relevant SOX ITGC requirements.
You have professional certifications such as CISA, CISSP, CPA, or CIA (multiple preferred).
You have experience collaborating across Engineering, Security, and Product functions to embed governance into technology design.
You have excellent communication skills, executive presence, and the ability to translate technical findings into actionable business insights.
You have a Bachelor’s or Master’s degree in Information Systems, Computer Science, Accounting, or related discipline.
Must be comfortable regularly exercising discretion and independent judgment in performing job duties, including evaluating options, making informed decisions, and determining appropriate courses of action within the scope of assigned responsibilities.

Notice to Applicants for Jobs Located in NYC or Remote Jobs Associated With Office in NYC Only

We use Covey as part of our hiring and/or promotional process for jobs in NYC and certain features may qualify it as an AEDT in NYC. As part of the hiring and/or promotion process, we provide Covey with job requirements and candidate submitted applications. We began using Covey Scout for Inbound from August 21, 2023, through December 21, 2023, and resumed using Covey Scout for Inbound again on June 29, 2024.

The Covey tool has been reviewed by an independent auditor. Results of the audit may be viewed here: Covey

Compensation

The successful candidate’s starting pay will fall within the pay range listed below and is determined based on job-related factors including, but not limited to, skills, experience, qualifications, work location, and market conditions. Base salary is localized according to an employee’s work location. Ranges are market-dependent and may be modified in the future.

In addition to base salary, the compensation for this role includes opportunities for equity grants. Talk to your recruiter for more information.

DoorDash cares about you and your overall well-being. That’s why we offer a comprehensive benefits package to all regular employees, which includes a 401(k) plan with employer matching, 16 weeks of paid parental leave, wellness benefits, commuter benefits match, paid time off and paid sick leave in compliance with applicable laws (e.g. Colorado Healthy Families and Workplaces Act). DoorDash also offers medical, dental, and vision benefits, 11 paid holidays, disability and basic life insurance, family-forming assistance, and a mental health program, among others.

To learn more about our benefits, visit our careers page here.

See below for paid time off details:

For salaried roles: flexible paid time off/vacation, plus 80 hours of paid sick time per year.
For hourly roles: vacation accrued at about 1 hour for every 25.97 hours worked (e.g. about 6.7 hours/month if working 40 hours/week; about 3.4 hours/month if working 20 hours/week), and paid sick time accrued at 1 hour for every 30 hours worked (e.g. about 5.8 hours/month if working 40 hours/week; about 2.9 hours/month if working 20 hours/week).

The national base pay range for this position within the United States, including Illinois and Colorado.

$249,600—$312,000 USD

About DoorDash

At DoorDash, our mission to empower local economies shapes how our team members move quickly, learn, and reiterate in order to make impactful decisions that display empathy for our range of users—from Dashers to merchant partners to consumers. We are a technology and logistics company that started by enabling door-to-door delivery, and we are looking for team members who can help us go from a company that is known as the place you order food to a company that people turn to for any and all goods.

DoorDash is growing rapidly and changing constantly, which gives our team members the opportunity to share their unique perspectives, solve new challenges, and own their careers. We're committed to supporting employees’ happiness, healthiness, and overall well-being by providing comprehensive benefits and perks including premium healthcare, wellness expense reimbursement, paid parental leave and more.

Our Commitment to Diversity and Inclusion

We’re committed to growing and empowering a more inclusive community within our company, industry, and cities. That’s why we hire and cultivate diverse teams of people from all backgrounds, experiences, and perspectives. We believe that true innovation happens when everyone has room at the table and the tools, resources, and opportunity to excel.

Statement of Non-Discrimination: In keeping with our beliefs and goals, no employee or applicant will face discrimination or harassment based on: race, color, ancestry, national origin, religion, age, gender, marital/domestic partner status, sexual orientation, gender identity or expression, disability status, or veteran status. Above and beyond discrimination and harassment based on “protected categories,” we also strive to prevent other subtler forms of inappropriate behavior (i.e., stereotyping) from ever gaining a foothold in our office. Whether blatant or hidden, barriers to success have no place at DoorDash. We value a diverse workforce – people who identify as women, non-binary or gender non-conforming, LGBTQIA+, American Indian or Native Alaskan, Black or African American, Hispanic or Latinx, Native Hawaiian or Other Pacific Islander, differently-abled, caretakers and parents, and veterans are strongly encouraged to apply. Thank you to the Level Playing Field Institute for this statement of non-discrimination.

Pursuant to the San Francisco Fair Chance Ordinance, Los Angeles Fair Chance Initiative for Hiring Ordinance, and any other state or local hiring regulations, we will consider for employment any qualified applicant, including those with arrest and conviction records, in a manner consistent with the applicable regulation.

If you need any accommodations, please inform your recruiting contact upon initial connection.

Notice to Applicants for Jobs Located in NYC or Remote Jobs Associated With Office in NYC Only

We used Covey as part of our hiring and/or promotional process for jobs in NYC and certain features may qualify it as an AEDT in NYC. As part of the hiring and/or promotion process, we provided Covey with job requirements and candidate submitted applications. We began using Covey Scout for Inbound from August 21, 2023, through December 21, 2023. We resumed using Covey Scout for Inbound again on June 29, 2024, and ceased using Covey Scout for Inbound on April 30, 2026.

The Covey tool has been reviewed by an independent auditor. Results of the audit may be viewed here: https://getcovey.com/nyc-local-law-144.

Beware of recruitment scams: DASH Brands will never ask you to pay money or share sensitive financial information during hiring — learn more about DASH Brands' legitimate recruiting process at careersatdoordash.com/recruitment-scam-awareness.