IT Audit Senior Manager

Block; San Francisco (CA); On-site; USD 180,000 - 240,000; Full time

Job summary

Block is seeking an IT Audit Senior Manager to lead risk-based audits of technology, cybersecurity, and banking systems across the organization. The role focuses on evaluating controls, data integrity, and third‑party services within a regulated financial services environment.

You will drive risk assessment, planning, execution, and remediation validation, while coaching junior staff and shaping audit methodology.

Qualifications

• 7+ years of IT audit experience in a regulated financial institution.
• Strong understanding of internal controls, risk assessment, and audit methodologies.
• Excellent written and verbal communication, with ability to translate complex issues for diverse audiences.
• Experience applying data analytics and AI tools across the audit lifecycle to strengthen risk assessment and testing.
• Executive presence and cross-functional collaboration to influence stakeholders.

Responsibilities

• Plan and perform risk-based IT audits, including walkthroughs, control design assessments, and testing.
• Assess technology and cybersecurity risks across IAM, privileged access, cloud, network security, and vulnerability management.
• Audit banking applications and interfaces, focusing on data integrity and automated processing.
• Evaluate third-party and affiliate technology services and oversight.
• Maintain IT audit universe and inform the annual audit plan.
• Coach colleagues and support integrated audits across broader banking processes.

Skills

IT audit

Data analytics

AI in audit

Communication

Project management

Education

CPA, CIA, CRCM, CISA certifications

Job description

Block is one company built from many blocks, all united by the same purpose of economic empowerment. The blocks that form our foundational teams - People, Finance, Counsel, Hardware, Information Security, Platform Infrastructure Engineering, and more - provide support and guidance at the corporate level. They work across business groups and around the globe, spanning time zones and disciplines to develop inclusive People policies, forecast finances, give legal counsel, safeguard systems, nurture new initiatives, and more. Every challenge creates possibilities, and we need different perspectives to see them all. Bring yours to Block.

The Role

Square Financial Services is seeking an IT Audit Senior Manager with deep technical audit expertise and direct experience auditing regulated financial institutions. In this role you will lead and personally execute risk-based operational, technology, and cybersecurity audits from risk assessment and scoping through testing, reporting, and remediation validation. As well as assess the systems, infrastructure, applications, and technology service providers supporting banking activities, including services delivered through affiliated entities.

You Will

• Plan and perform risk-based IT audits, including technical walkthroughs, control design assessments, operating effectiveness testing, workpaper preparation, and reporting.
• Assess technology and cybersecurity risks across identity and access management, privileged access, cloud and infrastructure security, network security, vulnerability management, security monitoring, and incident response.
• Audit banking applications and supporting interfaces, including systems supporting lending, deposits, and payments, with attention to application controls, data integrity, and automated processing.
• Evaluate third‑party and affiliate‑provided technology services, including the Bank's oversight, service dependencies, assurance coverage, and accountability for controls.
• Maintain the IT audit universe and risk assessment, inform the annual audit plan, and adjust coverage for emerging risks, new products, and significant technology changes.
• Contribute to audit methodology, coach colleagues, and support integrated audits by assessing technology risks within broader banking processes.

You Have

• 7+ years of IT audit experience, including substantial hands‑on responsibility for engagements within a regulated financial institution.
• Strong understanding of internal controls, risk assessment, and audit methodologies, with experience driving continuous improvement in audit processes, risk coverage, and/or issue management.
• Excellent written and verbal communication skills, with the ability to translate complex issues into clear, actionable insights for technical and non‑technical audiences.
• Demonstrated ability to apply data analytics and artificial intelligence (AI) tools across the audit lifecycle to strengthen risk assessment and testing.
• Exceptional project management and organizational skills, with the ability to manage multiple audits and priorities simultaneously in a fast‑paced environment.
• Executive presence and sound judgment, with a demonstrated capacity to build cross‑functional relationships and influence stakeholders.
• CPA, CIA, CRCM, CISA, or other relevant professional certification.

We would also value

• Prior experience interacting with regulators or supporting regulatory exams.
• Willingness and ability to learn and contribute to audit coverage beyond primary areas of expertise as business needs evolve.
• Experience applying frameworks such as NIST or COBIT to risk‑based audits without treating framework compliance as a substitute for control testing.

We're working to build a more inclusive economy where our customers have equal access to opportunity, and we strive to live by these same values in building our workplace. Block is an equal opportunity employer evaluating all employees and job applicants without regard to identity or any legally protected class. We will consider qualified applicants with arrest or conviction records for employment in accordance with state and local laws and "fair chance" ordinances.

We believe in being fair, and are committed to an inclusive interview experience, including providing reasonable accommodations to disabled applicants throughout the recruitment process. We encourage applicants to share any needed accommodations with their recruiter, who will treat these requests as confidentially as possible. Want to learn more about what we're doing to build a workplace that is fair and square? Check out our I+D page .

While there is no specific deadline to apply for this role, U.S. roles are typically open for an average of 55 days before being filled by a successful candidate. Please refer to the date listed at the top of this job page for when this role was first posted.

Block takes a market-based approach to pay, and pay may vary depending on your location. U.S. locations are catego