Staff Internal Auditor

Our Opportunity:

We at Chewy are seeking a Staff Internal Auditor to join our dynamic Internal Audit Team! This role is instrumental in supporting the execution of the annual Internal Audit Risk-Based Audit plan and Sarbanes-Oxley (SOX) program compliance fieldwork. The Staff Internal Auditor will perform financial, operational, and compliance assurance audits and advisory projects across all areas of our business. The Staff Auditor will help plan and scope audits/advisory projects, complete project plans, prepare written findings, and facilitate business responses and action items. Audit areas may include Accounting, Finance, HR, operations, payments, business continuity, asset management, and legal, among others.

What You’ll Do:

• Execute risk-based audits of operational processes, financial controls, and SOX 404 key controls in accordance with department policies and IIA Standards.
• Perform testing, walkthroughs, and root cause analyses; prepare well-documented workpapers and ensure quality execution of audit procedures.
• Monitor audit progress, manage priorities, and ensure timely completion of assigned tasks to meet audit deadlines
• Assist in annual SOX 404 scoping and risk assessment, including financial statement mapping and identification of in-scope entities, processes, systems, and accounts.
• Evaluate the design and operating efficiency of internal controls over financial reporting.
• Work closely with process owners and control owners to assess and support the ongoing effectiveness of internal controls.
• Conduct audits of various business units to evaluate internal controls, process efficiency, and compliance with company policies and procedures.
• Identify control deficiencies and process improvement opportunities, develop practical recommendations, and track corrective action plans.
• Apply technical knowledge of accounting, financial reporting, and operational risks in evaluating processes.
• Be a collaborative partner and cross-functional team member on audits and advisory projects.
• Communicate audit findings and recommendations clearly and professionally with audit team members, process owners, and senior management.
• Coordinate and provide support to external auditors during interim and year-end procedure
• Participate in special projects and advisory engagements, including new system implementations, process redesigns, and emerging risk assessments.
• Find opportunities to use automation and data analytics in audit testing and reporting.
• Contribute to the continuous improvement of audit processes, tools, and templates.

What You’ll Need:

• Bachelor’s degree in Accounting, Finance, Information Systems, or a related field.
• 1–3 years of relevant experience in internal audit, external audit, or risk consulting, preferably with exposure to SOX compliance.
• Foundational understanding of internal controls, risk management, and audit methodologies (including control design and operating effectiveness testing).
• Familiarity with SOX 404, SEC reporting requirements, and US GAAP.
• Strong analytical and problem-solving skills, including the ability to assess process flows and perform root cause analysis.
• Excellent verbal and written communication skills, with the ability to present findings clearly and professionally.
• Well-developed organizational, documentation, and project management skills.
• Demonstrated ability to work independently and collaboratively in a team-oriented and fast-paced environment.
• Ability to manage multiple priorities and meet deadlines under pressure.
• Willingness to travel up to 10% as needed.

Bonus (if applicable):

• Professional certifications such as CPA, CIA, CISA, or CFE (or actively pursuing certification).
• Experience with audit management or GRC platforms (e.g., AuditBoard).
• Exposure to ERP systems (e.g., Oracle, Workday).
• Interest or experience in using automation and data analytics tools (e.g., Alteryx, Tableau, LLM prompting/AI tools).
• Prior experience with a Big 4 accounting firm is preferred, but not required.
• Understanding of IT application controls, IT General Controls (ITGCs), and the COSO Internal Control Framework.