5 дней назад
Technology & Security Risk Auditor (Fintech)
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
Technology & Security Risk Auditor (Fintech): Supporting risk-based information technology and information security audits across payment technology, cloud platforms, and business processes with an accent on control testing, audit lifecycle execution, and security risk analysis. Focus on evaluating AWS, GCP, and Azure controls, identifying root causes of audit exceptions, and recommending practical improvements to internal controls.
Location: Cincinnati, Ohio; authorized U.S. work status required. The role includes 10–15% travel, including potential international travel.
Company
provides payment technology and software solutions for merchants, financial institutions, and cardholders worldwide.
What you will do
- Support risk assessments, audit planning, client coordination, fieldwork, data analysis, documentation, reporting, and remediation validation.
- Test information technology and information security controls across integrated, risk-based audits.
- Evaluate technology risks and controls in on-premises and cloud environments, including AWS, GCP, and Azure.
- Assess architecture, system provisioning, configuration, monitoring, incident management, change management, access management, and disaster recovery processes.
- Review security operations such as vulnerability management, penetration testing, logging, monitoring, incident response, and defense-in-depth controls.
- Identify root causes of audit exceptions, recommend practical improvements, and collaborate with management and control owners.
Requirements
- 1+ years of relevant audit or risk management experience.
- Bachelor’s degree in Auditing, Business Management, Information Technology, or a related field.
- Knowledge of auditing principles, audit information analysis, and reporting.
- Familiarity with COBIT, FFIEC, PCI DSS, Sarbanes-Oxley, ISO 27001, and ITIL.
- Must be authorized to work in the United States without current or future employment-based visa sponsorship.
- Payment processing, card issuance, professional services audit, or risk advisory experience is preferred.
Nice to have
- CIA, CISA, CISM, CISSP, or another relevant certification.
- Experience with CI/CD pipelines, infrastructure as code, containerization, application security, and least-privilege access.
- Knowledge of cloud, mainframe, UNIX/Linux, Windows, SQL Server, Oracle, business continuity, and disaster recovery architecture.
- Strong project management, communication, presentation, and relationship-building skills.
Culture & Benefits
- Collaborative Internal Audit environment with exposure to senior leadership and divisions across the globe.
- Opportunities for career advancement and continuous technical development.
- Work focused on diverse, challenging, risk-based audit and advisory projects.
- Inclusive culture emphasizing client focus, ownership, innovation, collaboration, and continuous improvement.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →
Похожие вакансии
10 дней назад
Auditor, Technology – Global Audit & Enterprise Risk Management (Cybersecurity)
5 дней назад
Lead Security Governance, Risk & Compliance Analyst (Payments)
116 000 - 145 000$
12 дней назад
Senior IT Audit Specialist (Cybersecurity)
70 320 - 105 480$
8 дней назад
Senior Technology and Cybersecurity Risk & Controls Specialist
123 600 - 206 000$
12 дней назад
Senior Staff Security Engineer (FinTech)
224 000 - 300 000$
6 дней назад
Director of Information Security and Technical Operations (Fintech)
170 000 - 200 000$