Senior Manager, Internal Audit IT
WFA Digital Insight
The demand for skilled IT auditors has surged 25% in the last year, driven by the rapid growth of cloud-based services. As companies like Coinbase expand their remote operations, the need for experts who can navigate complex cybersecurity risks has become paramount. With its commitment to remote work, Coinbase stands out as an attractive employer for those seeking flexibility and challenge. Before applying, candidates should be prepared to demonstrate their technical expertise, leadership skills, and ability to drive integrated assurance across multiple teams.
Job Description
About the Role
The Senior Manager, Internal Audit IT, will play a critical role in leading Coinbase's global IT and security audit program. This position involves operating within an independent third line of defense, maintaining functional accountability to the Audit Committee. The successful candidate will own the multi-year IT and security audit roadmap, ensuring coordinated coverage across all regions and alignment with Coinbase's enterprise risk profile and regulatory expectations.As a senior leader, you will be responsible for driving the end-to-end delivery of complex, cross-functional IT and security audits. Your expertise will be crucial in identifying, evaluating, and mitigating technology and security risks across the organization. You will lead a high-performing global team of internal auditors and co-sourced resources, setting goals, coaching talent, managing performance, and building succession pipelines.
Coinbase is a remote-first company, but not remote-only. You can expect to get together quarterly for intense in-person working sessions called 'surges.' This unique approach to remote work allows for a mix of flexibility and collaboration, making it an attractive option for those who value work-life balance.
What You Will Do
- Own the end-to-end delivery of complex, cross-functional IT and security audits covering cloud infrastructure, security operations, identity and access management, data protection, vendor/third-party risk, and key products and services.
- Lead and develop a high-performing global team of internal auditors and co-sourced resources, setting goals, coaching talent, managing performance, and building succession pipelines across regions.
- Drive integrated assurance across the three lines of defense by partnering with first and second line risk, compliance, security, and technology teams to rationalize testing and maximize control coverage.
- Shape executive-level reporting on technology and security control effectiveness, distilling key themes, emerging risks, and root causes into clear materials for senior management, the Head of Internal Audit, and the Audit Committee.
- Partner with technology and security leadership across Engineering, Security, Infrastructure, and Product to provide independent challenge on major initiatives without compromising third-line independence.
- Build continuous improvement into the audit function by driving adoption of data analytics, automation, and generative AI to modernize IT and security audit execution.
- Collaborate with external audit partners to ensure alignment and minimize duplication of effort.
- Stay up-to-date with emerging trends and technologies in IT and security, applying this knowledge to enhance the audit program.
What We Are Looking For
- 12+ years of experience in internal audit with a deep focus on IT and information security, or in first-line/second-line technology/security roles with significant controls and audit exposure.
- Demonstrated success leading global, cross-functional IT audit portfolios spanning cloud, infrastructure, cybersecurity, and third-party risk across multiple regulatory jurisdictions.
- Deep technical knowledge of cloud-based technology stacks, software development lifecycles, cloud security configurations, and enterprise IT operations risks and controls.
- Relevant professional certifications (e.g., CISA, CISSP, CIA, CPA) and working fluency with frameworks such as NIST, COBIT, and ITIL.
- Proven leadership experience building, mentoring, and managing global audit teams, including co-sourced resources and indirect reports across time zones.
- Utilizes generative AI responsibly, maintaining human oversight to deliver business value.
- Strong understanding of regulatory requirements and industry standards for IT and security.
Nice to Have
- Experience with data analytics and automation tools to enhance audit efficiency.
- Knowledge of blockchain technology and its applications.
- Familiarity with agile development methodologies and their impact on audit practices.
- Certification in cloud security (e.g., CCSK, CCSP).
Benefits and Perks
- Competitive salary and equity package.
- Comprehensive health, dental, and vision insurance.
- Flexible PTO policy and paid holidays.
- Access to professional development opportunities, including training and conference sponsorships.
- Remote work stipend to support your home office setup.
- Quarterly in-person 'surges' for team building and collaboration.
- Opportunity to work with a talented team of professionals in a fast-paced, dynamic environment.
How to Stand Out
- Develop a strong understanding of cloud security configurations and enterprise IT operations risks to stand out in this role.
- Showcase your ability to lead cross-functional teams and drive integrated assurance across multiple lines of defense.
- Be prepared to discuss how you stay current with emerging trends and technologies in IT and security.
- Highlight any experience with data analytics, automation, or generative AI in audit contexts.
- Prepare examples of how you have successfully managed and mentored global teams, including co-sourced resources.
- Demonstrate your ability to communicate complex technical information to executive-level stakeholders.
This is a remote position listed on WFA Digital, the platform for professionals who work from anywhere. Browse more remote jobs across all categories.