Internal Audit Senior, IT

Coinbase is looking for an Internal Audit Senior, IT to join the Internal Audit team focusing primarily on global IT and security related audits. This role is based in the US (Remote) and will be reporting to an Internal Audit IT Senior Manager. The individual will be responsible for executing all aspects of audits, providing independent testing and audit coverage of technology, products and information security globally at Coinbase. This includes coverage over information and cyber security areas, infrastructure, platforms and applications, and governance over information technology and security. The individual has audit experience within one of the following areas: Information Security, IT governance, risk management or application security.

What you’ll be doing (ie. job duties):

• As a part of a global internal audit team and working closely with the global IT audit portfolio, develop next generation audit practices to maintain a best-in-class global internal audit function.


• In depth understanding of local global regulatory requirements as it pertains to information technology, security and overall financial services applicable to Coinbase.


• Responsible for supporting Coinbase’s internal audit plan through the execution of information technology and security related audits from beginning to end. Key activities include audit planning, stakeholder management, fieldwork execution, reporting and validation of remediated audit findings.


• Develop audit reports on the effectiveness of the internal control structure for an executive level audience, ensuring reported findings are appropriately documented and supported by evidence.


• Develop customized and valuable solutions to issues identified during the course of audits performed.


• Manage and support internal audit staff and perform ad-hoc investigations/audits/reviews as required.


• Responsible for tracking and evaluating the adequacy and timeliness of management's response and the corrective action taken on internal audit findings, including validation of remediation activities.


• Remain current and increase knowledge of regulatory requirements that impact the organization, as well as in the areas of internal control, technology, security, business, company products and company information.


• Assist in the preparation of internal audit materials for the Audit Committee and Board of Directors.


• Validate the effectiveness of control function by leading periodic control certifications for all documented controls.


• Establish and maintain trusted relationships with business unit management across all levels.


• Work closely with both first and second lines of defense to maximize meetings utility, testing efficiencies and internal controls review coverage across the organization.


• Serve as a value-add and advisory function to business partners by identifying ways to address audit findings or opportunities for enhancements with the goal of mitigating risk and improving technology, security, and operational performance without compromising 3rd Line of Defense independence and objectivity.


• Assist with responses to regulatory inquiries as they relate to internal audit matters.


• Communicate with and educate process owners effectively, including non-finance individuals, on the importance of controls, an effective control environment, and the role of Internal Auditor.


• Promote new ideas / innovative means of executing projects and internal infrastructure enhancements focused on process or technology improvements.

What we look for in you (ie. job requirements):

• Bachelor's Degree in computer science/management information systems or related information technology or security fields and/or accounting or related fields.


• 4+ years of experience in internal audit with a heavy focus on technology, information technology and information security audit; or experience in first line, operational, technology, software development, and security fields. Excellent understanding of cloud based technology stack, software and application development lifecycle, cloud configurations and security services, and overall an Enterprise technology stack operations, maintenance and oversight risks and controls.


• Proven project management skills with the ability to juggle multiple responsibilities and deadlines.


• Solid analytical and problem solving skills, with high standards for quality, accuracy and attention to detail.


• Excellent written and verbal communication skills.


• Self-driven, ability to work independently and in a team environment.


• Experience working in a fast paced organization.


• Excellent understanding of data analysis techniques.


• Demonstrated proficiency in Google Suite or MS Excel, Word and PowerPoint.


• Basic scripting experience in coding languages such as Python, Ruby, etc.

Nice to haves:

• Professional Internal Audit / IT / Security qualification (e.g., CISA, CFE, etc.) or comprehensive working knowledge of the Chartered Institute of Internal Auditor practice.


• Understanding of international regulatory requirements as it pertains to information technology and security.


• Understanding of crypto, payments and/or financial services industry and experience in auditing information systems and controls.


• Entrepreneurial attitude and experience with, or the ability to adapt to, a rapidly growing start-up with associated complexities and ambiguities.


• Experience working with/in an out-sourced or co-sourced internal audit function.


• Ability to work across functions and time zones.

Job P74195