Senior IT Internal Auditor (AI & Cloud)

Location: Seoul, South Korea; onsite

Company

hirify.global is a South Korean commerce and technology company building large-scale shopping, eating, and lifestyle services as a global public company.

What you will do

• Lead and support global IT risk and control evaluations for Internal Controls over Financial Reporting, US SOX, and complex IT operational areas.
• Review internal control documentation, technical Risk and Control Matrices, and remediation blueprints under US SOX, US GAAP, PCAOB, and Korean compliance standards.
• Assess risks and technical controls across enterprise systems, AWS/GCP cloud architecture, containerized applications, infrastructure, data privacy, disaster recovery, and cyber threats.
• Design and execute testing of IT General Controls, automated application controls, API integrations, identity and access management, and system-generated key reports.
• Identify automation opportunities and support the use of Generative AI and LLM tools for audit documentation, code reviews, script generation, and control testing.
• Communicate findings, coordinate with external auditors, and partner with Information Security, DevOps, Engineering, Financial Controls, and IT Compliance teams through remediation closure.

Requirements

• Bachelor’s degree in Computer Science, Management Information Systems, Accounting, Cybersecurity, Data Analytics, or a related field.
• 3–5 years of experience in IT audit, cybersecurity audit, or IT risk consulting.
• At least one active certification: CISA, CISSP, CRISC, CISM, CIA, or AWS/GCP Cloud Certification.
• Bilingual fluency in English and Korean, including spoken, written, and technical reading and writing.

Nice to have

• Experience in a fast-paced U.S.-listed technology or e-commerce company or a Big Four IT risk advisory practice.
• Hands-on experience auditing microservices, CI/CD pipelines, Kubernetes, Docker, AWS, or GCP.
• Experience developing continuous-auditing scripts or machine-learning models for fraud and anomaly detection.
• Knowledge of COBIT, NIST CSF, ISO 27001, SOC 1, SOC 2, and CIS Benchmarks, with experience evaluating ITGCs, cloud security configurations, and identity governance.
• Proficiency in SQL, Python, R, Tableau, Power BI, or Alteryx, with experience analyzing data from PostgreSQL, MySQL, Snowflake, or BigQuery.
• Familiarity with RPA, script-driven testing, LLMs, prompt engineering, and automated code analysis.
• Strong written and verbal communication skills and the ability to explain technical risks to non-technical stakeholders and defend findings constructively.
• Experience managing multi-threaded technical audit engagements in fast-paced e-commerce or technology environments.

Culture & Benefits

• Full-time regular position with a 12-week probation period, which may be skipped, shortened, or extended according to business needs.
• Entrepreneurial startup culture supported by the resources of a large global public company.
• Work on high-impact initiatives in an always-on, high-tech commerce environment.
• Employment protections and preferential treatment may apply to eligible veterans, people with disabilities, and other protected groups under applicable laws.

Hiring process

• Application review, job-fit interview, focus interview, and offer.
• Interview schedules and results are communicated by email; the process may vary depending on the role and scheduling.