IT Audit & Security Assurance Specialist

Deriv.com; Dubai; On-site; AED 300,000 - 420,000; Full time

Job summary

Deriv is seeking an IT audit professional to independently assess technology controls across infrastructure, cloud environments, applications, and engineering processes. The role emphasizes evidence-led testing, clear findings, and practical recommendations for business resilience and regulatory alignment.

This hands-on position involves testing identity and access management, network security, vulnerability management, and CI/CD practices, with collaboration across engineering and security

Qualifications

• Relevant IT audit or technology assurance experience, ideally in regulated financial services or fintech.
• Experience testing IT controls, assessing technical evidence, and documenting audit conclusions.
• Working understanding of cloud environments, cybersecurity, identity and access management, and data governance.

Responsibilities

• Plan IT audit work: risk assessments, scoping, testing programmes.
• Test technology controls: IAM, network security, vulnerability management, monitoring, incident response.
• Review cloud configurations, secure development, CI/CD, change management, application security.
• Assess data controls: data integrity, interfaces, governance for AI-enabled systems.
• Evaluate technology resilience: backup/recovery, DR testing, service availability.
• Document findings with clear business impact and practical recommendations.
• Validate remediation with retests and escalate gaps as needed.
• Collaborate with engineering and security teams while maintaining independence.

Skills

IT audit

Cybersecurity

Cloud security

Analytical thinking

English communication

Education

Information systems degree

CISA

CIA

Tools

COBIT

NIST

ISO 27001

IAM

SIEM

Job description

Deriv is seeking an IT audit professional to independently assess technology controls across infrastructure, cloud environments, applications, and engineering processes. The role emphasizes evidence-led testing, clear findings, and practical recommendations for business resilience and regulatory alignment.

This hands-on position involves testing identity and access management, network security, vulnerability management, and CI/CD practices, with collaboration across engineering and security