Head of Information Technology Audit

Audit & Risk Recruitment; San Jose (CA); On-site; USD 180,000 - 240,000; Full time

Job summary

Audit & Risk Recruitment is hiring a Head of IT Audit (Payments Focus) in San Jose, CA. This senior role leads the IT internal audit function for payments-focused technology risk across global markets.

You will develop audit strategies, lead complex reviews from scoping to reporting, and engage with regulators. The position requires deep expertise in IT controls, payments infrastructure, and cross-border regulatory environments.

Qualifications

• Minimum 10+ years of IT Audit experience across payments, fintech, lending, and regulated financial products.
• Experience engaging with regulators around payments or money-transmission activities is helpful.
• Strong knowledge of payment regulations and technology control environments.
• Experience with data analytics and technology-enabled audit techniques is advantageous.

Responsibilities

• Develop and execute technology audit strategies covering payments and regulated financial products.
• Lead complex, risk-based technology audits from scoping through executive reporting.
• Provide SME across payment systems, digital wallets, and financial infrastructure.
• Engage with payment regulators and financial regulators across international markets.
• Partner with engineering, product and business teams to provide risk recommendations and technical challenge.

Skills

IT Audit experience

Regulatory knowledge

Regulators engagement

Data analytics

SQL

Python

CISA CISSP CRISC CAMS CIA

Leadership

Tools

SQL

Python

Job description

Head of IT Audit (Payments Focus) | San Jose, CA

The Audit & Risk Recruitment Company is supporting a fast-paced, innovative global technology organisation in hiring their first leader in IT Internal Audit to join its international Tech Governance team in San Jose, California (USA).

This is a senior opportunity for someone with deep expertise across IT Internal Audit, IT Compliance and Digital Risk across payments, fintech, lending, regulated financial products and technology risk. It is brilliant for those with deep experience in working with global regulations, engineering teams, tech teams and audit in order to provide solid IT Assurance to the business.

It includes a truly global scope across the US, EMEA and Asia offering 25% travel and an in-office culture (5 x per week in the office, however, with flexible working hours). You must be comfortable with going into the office.

An excellent role for those who thrive in a dynamic, collaborative environment and looking to build a new payments segment within a very strong brand. You will influence the rapid growth of the business with concrete opportunities to build a team in the future.

The role:

• Develop and execute technology audit strategies covering payments, lending and other regulated financial products. You will be the expert in the team for the payments segment of the business.
• Lead complex, risk-based technology audits and advisory reviews from scoping through executive reporting.
• Provide subject-matter expertise across payment systems, digital wallets, payment processing and financial infrastructure.
• Build, establish and audit end-to-end payment processing in areas like: payment authorisation, clearing and settlement across consumer, merchant, and platform payment flows.
• Assess technology, cybersecurity, operational resilience, data and regulatory risks.
• Engage directly with payment regulators and financial regulators across international markets.
• Partner closely with engineering, product and business teams to provide credible technical challenge and practical risk recommendations.
• Help shape the audit and assurance approach for rapidly evolving financial products across multiple jurisdictions.

Requirements:

• Minimum 10+ years’ experience in IT Audit, ideally over 14 years, preferably from the Big 4 and/or industry within payments, fintech, lending, technology, e-commerce or other regulatory environments. If you are in any other industry but working directly in the payments part, do apply.
• Strong knowledge of payment regulations and technology control environments.
• Experience developing audit plans and leading complex technology audits across APAC and/or EMEA.
• Previous experience engaging with regulators, particularly around payments or money-transmission activities is helpful.
• Strong understanding of complex technology environments; data flows and control frameworks.
• Knowledge of any of the following is also advantageous: encryption, tokenisation, payment security and API security.
• Excellent critical-thinking and problem-solving skills.
• Ability to operate confidently with senior executives, engineers, product teams and regulatory stakeholders.
• Exposure to areas such as PCI DSS, PSD2, Strong Customer Authentication, operational resilience, digital wallets, open banking and consumer lending.
• Experience with SQL, Python, data analytics or technology-enabled audit techniques, alongside qualifications such as CISA, CISSP, CRISC, CAMS or CIA, would also be advantageous, but not essential.

**No sponsorship can be offered for international candidates, you must be based in the US. Those in the US who may need sponsorship, could be considered.

**You must be comfortable with the office and working with different time zones.