Internal IT Auditor Regulated Fintech

About the role

The role focuses on technology, information security, and IT governance audits across Deriv’s regulated fintech entities, including banking, virtual asset service providers (VASPs) and investment services.

Key responsibilities

• Evaluate internal technology controls across IT governance, system security, and data protection to meet regulatory expectations.
• Conduct risk‑based IT audits of regulated banking, VASP and investment service entities, covering cloud environments, DevOps pipelines and core platforms.
• Audit specialized systems such as banking platforms, VASP wallets, cryptographic key management and algorithmic trading systems.
• Identify security and compliance vulnerabilities and propose remediation to avoid breaches, penalties and downtime.
• Track global technology‑regulation standards (ISO 27001, SOC 2, DORA) and ensure Deriv stays ahead of emerging risks.
• Collaborate with engineering and information‑security teams to embed technical controls into daily workflows and foster a risk‑aware culture.
• Produce clear audit reports and follow‑up on corrective actions.

Required profile

• Strong knowledge of fintech regulatory frameworks such as DORA, local banking IT guidelines, and virtual‑asset technology requirements.
• Experience working closely with engineering and InfoSec teams to integrate controls.

Required skills

• AWS cloud environment
• Google Cloud Platform (GCP)
• Kubernetes
• Docker
• Cryptographic key management
• ISO 27001
• SOC 2
• DORA regulatory framework