FinTech IT Risk & Compliance Auditor

Deriv; Cyberjaya; On-site; MYR 150,000 - 230,000; Full time

Job summary

Deriv is seeking an experienced IT auditor to improve controls across our regulated fintech entities, including banking, VASP wallets, and crypto tech. You will assess IT governance, security, and data protection, and embed robust controls into daily operations.

Bring 5+ years of audit experience, deep regulatory knowledge (DORA, banking guidelines), and hands-on work with AWS/GCP, Kubernetes/Docker, IAM and encryption standards. English communication is essential.

Qualifications

• 5+ years in IT audit or technology compliance within fintech or regulated environments.
• Deep knowledge of IT regulatory frameworks (DORA, banking guidelines).
• Proven experience auditing cloud environments, containerized systems, and security controls.

Responsibilities

• Evaluate IT governance, system security and data protection controls.
• Audit banking, VASP, and investment service entities for regulatory alignment.
• Identify vulnerabilities and drive remediation with engineering teams.
• Track ISO 27001, SOC 2, and DORA compliance across platforms.
• Report findings to senior management and audit committees.

Skills

IT auditing

Cloud security (AWS/GCP)

Kubernetes/Docker

IAM & encryption standards

Blockchain/crypto tech

Education

Bachelor's degree in CS/Cybersecurity/IT

CISA certification (CRISC/CISM/CISSP a plus)

Tools

AWS

GCP

Kubernetes

Docker

cryptography tools

Job description

Deriv is seeking an experienced IT auditor to improve controls across our regulated fintech entities, including banking, VASP wallets, and crypto tech. You will assess IT governance, security, and data protection, and embed robust controls into daily operations.

Bring 5+ years of audit experience, deep regulatory knowledge (DORA, banking guidelines), and hands-on work with AWS/GCP, Kubernetes/Docker, IAM and encryption standards. English communication is essential.