Senior Internal Auditor, Technology

Job not on LinkedIn

🔥 0 minutes ago

🌐 Canada, Brazil – Remote

🇨🇦 Canada – Remote 🇧🇷 Brazil – Remote

⏰ Full Time

🟠 Senior

🔎 Auditor

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Kraken Digital Asset Exchange

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2011

₿ Crypto

💸 Finance

💳 Fintech

Crypto • Finance • Fintech

Kraken Digital Asset Exchange is a cryptocurrency platform that facilitates the buying and selling of over 200 cryptocurrencies, including Bitcoin, Ethereum, and many others. Founded in 2011, Kraken provides a comprehensive suite of features for both beginner and advanced traders, such as advanced trading interfaces and margin trading. The platform emphasizes industry-leading security, deep liquidity, and 24/7 customer support, making it a trusted choice for users worldwide. Kraken caters to individual investors as well as institutional clients, offering services like OTC trading and custody. The company is committed to transparency with its proof of reserves and mission-driven values. Kraken operates globally, supporting clients in over 190 countries, with a quarterly trading volume exceeding $207 billion. However, users are advised of the high risk of crypto investments and the lack of regulation in some jurisdictions.

📋 Description

• Plan and execute technology audits across cybersecurity, cloud, identity and access management, SDLC, and change management • Assess security controls for systems containing sensitive customer records and identity documentation • Assess operational resilience, incident management, technology risk management, and third-party technology oversight • Review data governance, privacy, data-lake controls, and AI governance, security, and privacy • Test IT general controls and application controls against ISO 27001, NIST CSF, SOC 2, or COBIT • Identify control gaps, perform root cause analysis, and assess business and financial-reporting impact • Apply AI-enabled workflows for testing, anomaly detection, and analytics with human ownership of conclusions • Lead multiple audit engagements concurrently from planning through fieldwork and reporting • Document findings, control gaps, root causes, workpapers, and reports • Track and validate issue remediation and escalate delays or gaps • Improve audit methodologies and frameworks while ensuring conformance with IIA Global Internal Audit Standards and quality assurance requirements • Lead engagement teams and coordinate co-sourced specialists • Serve as a point of contact for Engineering, Infrastructure, and Security control owners • Communicate audit results and advise on control improvements while maintaining audit independence • Translate technical findings into actionable conclusions for non-technical stakeholders and senior leadership • Partner with Internal Audit team members and co-sourced resources for coordinated audit-plan coverage

🎯 Requirements

• 5–8 years in IT audit, information security, or a related technology risk function • Ideally experience within financial services, fintech, or crypto • Broad IT audit experience across cybersecurity, identity and access management, ITGCs, cloud, SDLC and change management, data and privacy, operational resilience, and third-party technology risk • Strong grasp of ISO 27001, NIST CSF, SOC 2, or COBIT control frameworks • Experience with AWS, GCP, or Azure cloud environments • Working knowledge of data governance and privacy, including GDPR • Exposure to AI governance, security, and privacy • Technical fluency with enterprise systems, databases, and deployment pipelines • Ability to translate technical findings for engineers and senior leaders • Responsible application of generative AI with human oversight • Relevant certifications such as CISA, CISSP, CRISC, CIA, or equivalent are nice to have • Familiarity with blockchain infrastructure, digital asset custody, or crypto-native technology environments is nice to have • Experience with CI/CD pipelines, version control, and modern deployment practices is nice to have • Exposure to operational resilience and ISO 27001 certification environments is nice to have • Applicants may redact age, date of birth, and educational attendance or graduation dates from resumes • Must complete any required job-related skills or work-style assessments • Must select the city and country from which they will work • Must disclose whether work authorization sponsorship is needed

🏖️ Benefits

• Remote work arrangement • Opportunity to work with a globally distributed team • Job-related skills or work-style assessments applied consistently across candidates • Equal opportunity employment