Назад
Company hidden
5 дней назад

Technology & Security Risk Auditor (Fintech)

Формат работы
onsite
Тип работы
fulltime
Грейд
junior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Technology & Security Risk Auditor (Fintech): Supporting risk-based information technology and information security audits across payment technology, cloud platforms, and business processes with an accent on control testing, audit lifecycle execution, and security risk analysis. Focus on evaluating AWS, GCP, and Azure controls, identifying root causes of audit exceptions, and recommending practical improvements to internal controls.

Location: Cincinnati, Ohio; authorized U.S. work status required. The role includes 10–15% travel, including potential international travel.

Company

hirify.global provides payment technology and software solutions for merchants, financial institutions, and cardholders worldwide.

What you will do

  • Support risk assessments, audit planning, client coordination, fieldwork, data analysis, documentation, reporting, and remediation validation.
  • Test information technology and information security controls across integrated, risk-based audits.
  • Evaluate technology risks and controls in on-premises and cloud environments, including AWS, GCP, and Azure.
  • Assess architecture, system provisioning, configuration, monitoring, incident management, change management, access management, and disaster recovery processes.
  • Review security operations such as vulnerability management, penetration testing, logging, monitoring, incident response, and defense-in-depth controls.
  • Identify root causes of audit exceptions, recommend practical improvements, and collaborate with management and control owners.

Requirements

  • 1+ years of relevant audit or risk management experience.
  • Bachelor’s degree in Auditing, Business Management, Information Technology, or a related field.
  • Knowledge of auditing principles, audit information analysis, and reporting.
  • Familiarity with COBIT, FFIEC, PCI DSS, Sarbanes-Oxley, ISO 27001, and ITIL.
  • Must be authorized to work in the United States without current or future employment-based visa sponsorship.
  • Payment processing, card issuance, professional services audit, or risk advisory experience is preferred.

Nice to have

  • CIA, CISA, CISM, CISSP, or another relevant certification.
  • Experience with CI/CD pipelines, infrastructure as code, containerization, application security, and least-privilege access.
  • Knowledge of cloud, mainframe, UNIX/Linux, Windows, SQL Server, Oracle, business continuity, and disaster recovery architecture.
  • Strong project management, communication, presentation, and relationship-building skills.

Culture & Benefits

  • Collaborative Internal Audit environment with exposure to senior leadership and divisions across the globe.
  • Opportunities for career advancement and continuous technical development.
  • Work focused on diverse, challenging, risk-based audit and advisory projects.
  • Inclusive culture emphasizing client focus, ownership, innovation, collaboration, and continuous improvement.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →