IT Audit Manager
On-siteAbu Dhabi, Abu Dhabi, United Arab Emirates
Job Summary
Conduct hands-on technical audits of IT infrastructure, cloud environments, APIs, and wallet systems by performing configuration reviews, code assessments, and access control testing. Execute the global IT audit programme across centralized processes while coordinating with cross-border teams to adapt scope for local regulatory nuances. Lead technology-risk scanning, technical walkthroughs with Engineering and Security teams, and the development of well-substantiated findings with actionable remediation recommendations. Prepare concise audit reports for senior management and the Board Audit Committee, tracking remediation progress and validating technical fixes. Collaborate with global IA colleagues to ensure consistent coverage and support readiness for regulatory reviews and independent assessments.
Required Qualifications
- Bachelor's degree in Information Systems, Computer Science, Engineering, or related field
- 8+ years of IT audit experience in financial services, fintech, or cryptocurrency exchange environments, with a strong technical execution focus
- Demonstrated experience working with cross-border teams and managing stakeholder relationships across multiple jurisdictions
- IT infrastructure & network architecture (firewalls, segmentation, DNS, load balancing, VPN, zero-trust)
- Cloud platforms (AWS, Tencent Cloud) — architecture review, IAM, security group configuration, logging & monitoring
- API security — authentication, authorisation, rate limiting, input validation, gateway configuration
- SDLC — secure coding practices, CI/CD pipeline controls, code review, container security, change management
- Ability to read and assess system configurations, infrastructure-as-code, CI/CD pipelines, and API specifications
- Hands-on experience with cloud security tooling (CloudTrail, GuardDuty, Azure Defender, AWS Config)
- Proficiency in log analysis, network traffic assessment, and security testing tools
- High integrity, professional skepticism, and attention to detail
- Proficiency in English and Mandarin Chinese
- Location: Hong Kong, Abu Dhabi or Malaysia
Desired Qualifications
- Digital wallet systems & crypto key management (HSM, MPC, multi-sig, cold/warm/hot wallet architecture)
- Web3 technology & blockchain security (smart contract auditing, on-chain monitoring, consensus mechanisms, DeFi protocol risks)
- Familiarity with digital-asset regulatory frameworks (EU MiCA, UAE VARA, Türkiye, Kazakhstan, Georgia, Indonesia, Argentina)
- Experience leveraging AI tools (e.g., Claude, Clawbot) and data analytics to support audit execution
- CISA, CISM, CISSP, or CRISC
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.