Head of IT Audit

Audit & Risk Recruitment; San Jose (CA); On-site; USD 150,000 - 190,000; Full time

Job summary

The Audit & Risk Recruitment Company is assisting a global technology organization in San Jose, California to hire a senior IT Auditor with deep expertise in payments, fintech, and regulatory technology risk. You will lead complex audits and interact with regulators across US, EMEA and APAC, with a strong hands-on approach and clear growth potential.

Based in San Jose, you will work in a fast-paced, collaborative team, building the next stage of a high-growth governance function, with 25% travel

Qualifications

• 10+ years in IT audit, preferably 14+ years, with Big 4 or industry experience.
• Strong knowledge of payment regulations and control environments.
• Experience leading complex technology audits across APAC/EMEA.
• Able to engage with regulators and senior stakeholders.

Responsibilities

• Develop and execute technology audit strategies covering payments and regulated products.
• Lead risk-based technology audits from scoping to executive reporting.
• Provide SME across payment systems, wallets, processing and infrastructure.
• Assess technology, cybersecurity, operational resilience, data and regulatory risks.
• Engage with payment regulators and financial regulators across markets.

Skills

IT Audit

Regulatory knowledge

Stakeholder communication

Data analytics

Regulatory engagement

Payments risk

Tools

SQL

Python

Data analytics tools

Job description

Technology Audit Lead (Head of function equivalent elsewhere) | San Jose, CA

The Audit & Risk Recruitment Company is supporting a global technology organisation in identifying a very experienced IT Auditor to join its international Tech Governance team in San Jose, California (USA).

This is a senior opportunity for someone with deep expertise across IT Audit, IT Compliance and Digital Risk, and payments, fintech, lending, regulated financial products and technology risk exposure. It includes a truly global scope across the US, EMEA and Asia offering 25% travel and an in-office culture (5 x per week in the office, however, with flexible working hours).

An excellent role for those who thrive in a dynamic, collaborative environment and looking to build a new segment within a very strong brand. You will influence the rapid growth of the business with concrete opportunities to build a team in the future.

The role:

• Develop and execute technology audit strategies covering payments, lending and other regulated financial products. You will be the expert in the team for the payments segment of the business.
• Lead complex, risk-based technology audits and advisory reviews from scoping through executive reporting.
• Provide subject-matter expertise across payment systems, digital wallets, payment processing and financial infrastructure.
• Assess technology, cybersecurity, operational resilience, data and regulatory risks.
• Engage directly with payment regulators and financial regulators across international markets.
• Partner closely with engineering, product and business teams to provide credible technical challenge and practical risk recommendations.
• Help shape the audit and assurance approach for rapidly evolving financial products across multiple jurisdictions.

Requirements:

• Minimum 10+ years’ experience in IT Audit, ideally over 14 years, preferably from the Big 4 and/or industry within payments, fintech, lending, technology, e-commerce or other regulatory environments.
• Strong knowledge of payment regulations and technology control environments.
• Experience developing audit plans and leading complex technology audits across APAC and/or EMEA.
• Previous experience engaging with regulators, particularly around payments or money-transmission activities.
• Strong understanding of complex technology environments; data flows and control frameworks.
• Excellent critical-thinking and problem-solving skills.
• Ability to operate confidently with senior executives, engineers, product teams and regulatory stakeholders.
• Exposure to areas such as PCI DSS, PSD2, Strong Customer Authentication, operational resilience, digital wallets, open banking, consumer lending is helpful.
• Experience with SQL, Python, data analytics or technology-enabled audit techniques, alongside qualifications such as CISA, CISSP, CRISC, CAMS or CIA, would also be advantageous, but not essential.

**No sponsorship can be offered, you must be based in the US.

**You must be comfortable with the office and working with different time zones.