IT Audit Specialist – Technology & Cybersecurity Assurance

About the role

Deriv is seeking an IT Audit Specialist to deliver independent, evidence‑led audit work that strengthens the security, reliability and governance of its technology platform. This hands‑on individual contributor role focuses on technology and cybersecurity assurance across infrastructure, cloud, applications and operational resilience.

Key responsibilities

• Plan and execute IT audit work, including risk assessments, scope definition and testing programmes.
• Test controls such as identity and privileged access management, network security, vulnerability management, security monitoring, incident response and third‑party technology controls.
• Review cloud configurations, CI/CD pipelines, change management, application security and secrets management.
• Analyse technical evidence – logs, access records, change histories – and document findings with business impact.
• Validate remediation, retest controls and work constructively with engineering and security teams while maintaining independence.

Required profile

• Relevant IT audit or technology assurance experience, preferably in regulated financial services or fintech.
• Practical experience testing IT controls and assessing technical evidence.
• Knowledge of risk‑based auditing, IIA standards and frameworks such as COBIT, NIST or ISO/IEC 27001.
• Strong analytical skills, attention to detail and ability to manage deadlines.
• Excellent written and spoken English; relevant degree in information systems, computer science, cybersecurity or similar.

Required skills

• Cloud environments (e.g., AWS, Azure, GCP)
• Cybersecurity controls and vulnerability management
• Identity and access management
• Infrastructure and network security
• CI/CD pipeline auditing
• Scripting and automation (e.g., Python, PowerShell)
• Use of analytics and AI‑assisted tools for audit testing