Senior Tech Auditor — Crypto & FinTech Risk

Favia; United States; On-site; USD 150,000 - 210,000; Full time

Job summary

Payward’s Audit & Risk team seeks an experienced technology auditor to evaluate controls across a broad IT environment, including cybersecurity, identity and access management, and the SDLC. You will own scoping, stakeholder engagement, and outcomes for crypto‑centric platforms with fast deployment cycles.

You will lead engagements, assess control effectiveness, and contribute to continuous improvement of audit methodologies, aligning with global standards across regulated entities.

Qualifications

• 5-8 years in IT audit, information security, or a related technology risk function, ideally within financial services, fintech, or crypto
• Broad IT audit experience across cybersecurity, IAM, ITGCs, cloud, SDLC/change management, data/privacy, operational resilience, and third‑party tech risk
• Strong grasp of control frameworks (ISO 27001, NIST CSF, SOC 2, COBIT) and cloud environments (AWS, GCP, Azure)
• Working knowledge of data governance and privacy (GDPR), with exposure to AI governance, security, and privacy
• Technically fluent with enterprise tech (systems, databases, deployment pipelines) and able to translate findings for engineers and senior leaders
• Applies generative AI responsibly, with human oversight, to improve testing coverage and efficiency

Responsibilities

• Plan and execute technology audits across a broad IT environment—cybersecurity, cloud, IAM, SDLC and change management
• Assess the security of core systems holding sensitive customer records and identity documentation—access controls, data protection, monitoring, regulatory and policy compliance
• Assess operational resilience (BC/DR, resilience testing), incident management, tech risk management, and third‑party technology oversight
• Review data governance, privacy, and data‑lake controls, and assess AI governance, security, and privacy across AI/ML systems
• Test the design and operating effectiveness of IT general controls and application controls against ISO 27001, NIST CSF, SOC 2, COBIT
• Apply AI-enabled workflows—AI-assisted testing, anomaly detection, and analytics—to expand coverage and efficiency, with human ownership of conclusions

Skills

IT audit

Information security

Control frameworks

Cloud environments

Data governance & privacy

AI governance

Tools

CI/CD

Version control

Deployment pipelines

Job description

Payward’s Audit & Risk team seeks an experienced technology auditor to evaluate controls across a broad IT environment, including cybersecurity, identity and access management, and the SDLC. You will own scoping, stakeholder engagement, and outcomes for crypto‑centric platforms with fast deployment cycles.

You will lead engagements, assess control effectiveness, and contribute to continuous improvement of audit methodologies, aligning with global standards across regulated entities.