Remote IT Audit Lead — Cloud & Security

Coinbase; Augusta (ME); On-site; USD 131,000 - 154,000; Full time

Job summary

Coinbase is seeking an Internal Audit IT Associate Manager to lead IT and security audits across our cloud infrastructure and crypto products. You will mentor staff, translate complex findings for senior leadership, and collaborate with Engineering to strengthen controls while preserving independence.

You should have 6+ years in IT internal audit or security audits, hands-on cloud experience (AWS/GCP), and certifications such as CISA, CISSP, CIA or CISM. Equity and bonus eligibility are included.

Qualifications

• 6+ years of IT internal audit or security audit experience.
• Hands-on cloud platforms AWS/GCP security configurations and IAM.
• Knowledge of NIST CSF, COBIT, SOC 2, or ITIL; preferred certifications.
• Ability to lead multiple audits across time zones and communicate findings clearly.
• Familiarity with crypto/blockchain infrastructure and financial services audits.
• Responsible use of AI with human oversight.

Responsibilities

• Own end-to-end execution of IT and security audits across cloud infrastructure and blockchain-related products.
• Lead audit planning, fieldwork, and stakeholder management with evidence-based reports.
• Mentor and develop junior audit staff.
• Drive continuous monitoring of remediated findings and risk themes.
• Partner with Engineering and IT leadership to improve controls while maintaining independence.
• Stay current on regulatory requirements affecting Coinbase's control environment.

Skills

IT internal audit

Cloud audit

Stakeholder communication

Team leadership

Regulatory knowledge

Education

CISA/CISSP/CIA or CISM certification

Tools

AWS

GCP

IAM policies

NIST CSF

SOC 2

Job description

Coinbase is seeking an Internal Audit IT Associate Manager to lead IT and security audits across our cloud infrastructure and crypto products. You will mentor staff, translate complex findings for senior leadership, and collaborate with Engineering to strengthen controls while preserving independence.

You should have 6+ years in IT internal audit or security audits, hands-on cloud experience (AWS/GCP), and certifications such as CISA, CISSP, CIA or CISM. Equity and bonus eligibility are included.