Kraken logo
KrakenPosted 2 weeks ago

Senior Internal Auditor, Technology

RemoteBrazil or Canada

Full TimeSenior LevelMediumCryptocurrency

Job Summary

Plan and execute technology audits across cybersecurity, cloud, identity and access management, the software development lifecycle, and change management. Assess the security of core systems holding sensitive customer records, operational resilience, and third-party technology oversight. Review data governance, privacy, and AI governance controls, testing design and operating effectiveness against frameworks like ISO 27001, NIST CSF, SOC 2, or COBIT. Lead multiple concurrent engagements, document findings, and track remediation while applying AI-enabled workflows to expand coverage. Serve as a trusted point of contact for control owners across Engineering, Infrastructure, and Security teams to communicate results and advise on improvements.

Required Qualifications

  • 5-8 years in IT audit, information security, or a related technology risk function
  • ideally within financial services, fintech, or crypto
  • Broad IT audit experience across several of: cybersecurity, identity and access management, ITGCs, cloud, SDLC and change management, data and privacy, operational resilience, and third-party technology risk
  • Strong grasp of control frameworks (ISO 27001, NIST CSF, SOC 2, or COBIT)
  • cloud environments (AWS, GCP, Azure)
  • Working knowledge of data governance and privacy (e.g., GDPR)
  • exposure to AI governance, security, and privacy
  • Technically fluent with enterprise technology (systems, databases, deployment pipelines)
  • able to translate findings clearly for engineers and senior leaders alike
  • Applies generative AI responsibly, with human oversight, to improve testing coverage and efficiency

Desired Qualifications

  • Relevant certifications: CISA, CISSP, CRISC, CIA, or equivalent
  • Familiarity with blockchain infrastructure, digital asset custody, or crypto-native technology environments
  • Experience with CI/CD pipelines, version control, and modern deployment practices
  • Exposure to operational resilience and ISO 27001 certification environments

Hiring someone like this?

Get your role in front of qualified candidates on Sorce.

Get started

Apply to this job in one click with Sorce

Apply on Sorce