FinTech IT Risk & Compliance Auditor

Deriv; Cyberjaya; Sur place; MYR 150 000 - 230 000; Plein temps

Résumé du poste

Deriv is seeking an experienced IT auditor to improve controls across our regulated fintech entities, including banking, VASP wallets, and crypto tech. You will assess IT governance, security, and data protection, and embed robust controls into daily operations.

Bring 5+ years of audit experience, deep regulatory knowledge (DORA, banking guidelines), and hands-on work with AWS/GCP, Kubernetes/Docker, IAM and encryption standards. English communication is essential.

Qualifications

• 5+ years in IT audit or technology compliance within fintech or regulated environments.
• Deep knowledge of IT regulatory frameworks (DORA, banking guidelines).
• Proven experience auditing cloud environments, containerized systems, and security controls.

Responsabilités

• Evaluate IT governance, system security and data protection controls.
• Audit banking, VASP, and investment service entities for regulatory alignment.
• Identify vulnerabilities and drive remediation with engineering teams.
• Track ISO 27001, SOC 2, and DORA compliance across platforms.
• Report findings to senior management and audit committees.

Connaissances

IT auditing

Cloud security (AWS/GCP)

Kubernetes/Docker

IAM & encryption standards

Blockchain/crypto tech

Formation

Bachelor's degree in CS/Cybersecurity/IT

CISA certification (CRISC/CISM/CISSP a plus)

Outils

AWS

GCP

Kubernetes

Docker

cryptography tools

Description du poste

Deriv is seeking an experienced IT auditor to improve controls across our regulated fintech entities, including banking, VASP wallets, and crypto tech. You will assess IT governance, security, and data protection, and embed robust controls into daily operations.

Bring 5+ years of audit experience, deep regulatory knowledge (DORA, banking guidelines), and hands-on work with AWS/GCP, Kubernetes/Docker, IAM and encryption standards. English communication is essential.