Senior Internal Auditor, Technology

Responsibilities

Technology Audit Execution

• Plan and execute technology audits across cybersecurity, cloud, identity and access management, software development lifecycle (SDLC), and change management.
• Assess security controls for systems holding sensitive customer records and identity documentation, including access controls, data protection, monitoring, and regulatory and policy compliance.
• Assess operational resilience, including business continuity, disaster recovery, resilience testing, incident management, technology risk management, and third-party technology oversight.
• Review data governance, privacy, and data-lake controls.
• Assess AI governance, security, and privacy across AI and machine-learning systems.
• Test the design and operating effectiveness of IT general controls and application controls against ISO 27001, NIST CSF, SOC 2, or COBIT.
• Identify control gaps, perform root-cause analysis, and assess business and financial-reporting impact.
• Apply AI-enabled workflows, including AI-assisted testing, anomaly detection, and analytics, with human ownership of conclusions.

Engagement and Issue Management

• Lead multiple audit engagements concurrently, managing planning, fieldwork, and reporting end to end.
• Document audit findings, control gaps, root causes, workpapers, and reports.
• Track and validate remediation of identified issues, escalating delays or gaps to Internal Audit leadership.
• Contribute to continuous improvement of audit methodologies and frameworks.
• Ensure conformance with the IIA Global Internal Audit Standards and quality-assurance requirements.
• Lead engagement teams, including staffing and coordinating co-sourced specialists, to ensure quality and timely delivery.

Stakeholder Engagement and Reporting

• Serve as a point of contact for control owners across Engineering, Infrastructure, and Security.
• Communicate audit results and advise on control improvements while maintaining audit independence.
• Translate technical findings into clear, actionable conclusions for non-technical stakeholders and senior leadership.
• Partner with Internal Audit team members and co-sourced resources to coordinate audit-plan coverage.

Requirements

• 5–8 years of experience in IT audit, information security, or a related technology-risk function, ideally in financial services, fintech, or crypto.
• Broad IT audit experience across several of the following: cybersecurity, identity and access management, IT general controls, cloud, SDLC and change management, data and privacy, operational resilience, and third-party technology risk.
• Strong understanding of control frameworks such as ISO 27001, NIST CSF, SOC 2, or COBIT.
• Experience with cloud environments, including AWS, Google Cloud, or Azure.
• Working knowledge of data governance and privacy, such as GDPR, with exposure to AI governance, security, and privacy.
• Technical fluency with enterprise systems, databases, and deployment pipelines.
• Ability to translate findings clearly for engineers and senior leaders.
• Ability to apply generative AI responsibly, with human oversight, to improve testing coverage and efficiency.

Nice-to-Haves

• CISA, CISSP, CRISC, CIA, or equivalent certification.
• Familiarity with blockchain infrastructure, digital asset custody, or crypto-native technology environments.
• Experience with CI/CD pipelines, version control, and modern deployment practices.
• Exposure to operational resilience and ISO 27001 certification environments.

Compensation and Benefits

• Annual salary range: $72,600–$145,200.