Senior Tech Audit Lead: Cybersecurity & AI Controls

Kraken; San Francisco (CA); On-site; USD 180,000 - 240,000; Full time

Job summary

Kraken is seeking a senior IT audit/technology risk professional to partner with Internal Audit leadership. You will evaluate controls across cybersecurity, cloud, data privacy, and AI governance, shaping how Kraken safely manages high-risk environments in a crypto-enabled company.

You will lead audits, document findings, and oversee remediation across engineering, security, and infrastructure teams, ensuring alignment with global standards and regulatory expectations.

Qualifications

• 5-8 years in IT audit or technology risk within financial services, fintech, or crypto.
• Broad IT audit experience across cybersecurity, IAM, ITGCs, cloud, SDLC and data/privacy.
• Strong understanding of ISO 27001, NIST CSF, SOC 2 or COBIT.
• Familiarity with cloud environments (AWS, GCP, Azure).
• Ability to translate technical findings for engineers and senior leaders.

Responsibilities

• Plan and execute technology audits across a broad IT environment including cybersecurity, cloud, IAM, SDLC and change management.
• Assess core systems security, access controls, data protection, and regulatory compliance.
• Review operational resilience, incident management, and third-party technology risk.
• Evaluate data governance, privacy, AI governance, and AI/ML security controls.
• Test IT general and application controls against ISO 27001, NIST CSF, SOC 2, or COBIT; identify gaps and root causes.
• Lead engagements, coordinate co-sourced specialists, and ensure timely delivery.

Skills

IT audit

Information security

Control frameworks

ISO 27001

NIST CSF

SOC 2

COBIT

Cloud (AWS/GCP/Azure)

Data governance

Privacy

AI governance

Stakeholder communication

Tools

CI/CD pipelines

Version control

Job description

Kraken is seeking a senior IT audit/technology risk professional to partner with Internal Audit leadership. You will evaluate controls across cybersecurity, cloud, data privacy, and AI governance, shaping how Kraken safely manages high-risk environments in a crypto-enabled company.

You will lead audits, document findings, and oversee remediation across engineering, security, and infrastructure teams, ensuring alignment with global standards and regulatory expectations.