Internal IT Auditor – Regulated Fintech

About the role

Deriv is seeking an Internal IT Auditor to lead technology, information security, and IT‑governance audits across its regulated fintech entities, including banking, virtual asset service providers (VASPs), and investment services. You will work on high‑stakes risk operations, ensuring the entire fintech infrastructure remains secure, compliant, and resilient.

Key responsibilities

• Evaluate internal technology controls covering IT governance, system security, and data protection to meet regulatory expectations.
• Conduct risk‑based IT audits of regulated banking, VASP, and investment service platforms, including DevOps pipelines and core fintech systems.
• Identify security and compliance vulnerabilities, providing actionable recommendations to prevent breaches, penalties, and downtime.
• Monitor global technology‑regulation standards such as ISO 27001, SOC 2, and DORA, keeping Deriv ahead of emerging risks.
• Collaborate closely with engineering and InfoSec teams to embed robust technical controls into daily workflows.

Required profile

• Proven experience conducting technology risk audits in regulated financial or fintech environments.
• Strong understanding of banking, VASP, and investment‑service regulatory frameworks.
• Ability to work with cross‑functional teams and communicate technical findings clearly.

Required skills

• AWS
• GCP
• Kubernetes
• Docker
• Cryptographic key management
• Algorithmic trading systems
• VASP wallet technologies

What we offer

• Opportunity to audit cutting‑edge cloud and container environments.
• Exposure to complex global regulations and high‑growth fintech products.
• Collaboration with engineering and security architects to shape risk‑aware culture.