Internal Audit IT Associate Manager

Responsibilities

• ▹Own end-to-end execution of IT and security audits (cloud infrastructure AWS/GCP, application security, identity and access management, vendor/third-party risk, blockchain-related products including wallets and cold storage)
• ▹Lead audit planning, fieldwork, and stakeholder management, synthesizing findings into evidence-based reports and presentations for senior leadership and the Audit Committee
• ▹Direct and develop junior audit team members: day-to-day guidance, reviewing workpapers, coaching on technical and professional growth
• ▹Drive continuous monitoring and validation of remediated audit findings, tracking management responses and flagging delays or emerging risk themes
• ▹Partner with Engineering, Security, and IT leadership to identify control improvements while preserving third-line independence and objectivity
• ▹Build and maintain a current understanding of IT, security, and financial services regulatory requirements

Requirements

• ▹6+ years of experience in IT internal audit, information security audit, or first-line technology/security operations, with at least 1 year managing audit processes and staff
• ▹Hands-on audit experience with cloud platforms (AWS, GCP), including IAM policies, security configurations, encryption, logging, and network architecture
• ▹Working knowledge of audit and security frameworks such as NIST CSF, COBIT, SOC 2, or ITIL
• ▹Proven ability to lead multiple concurrent audits across time zones and communicate technical findings clearly to technical and non-technical stakeholders
• ▹Responsible use of generative AI with human oversight, driving measurable improvements in workflow efficiency, cost, and quality

Nice to have

• ▹Relevant certifications (CISA, CISSP, CIA, or CISM)
• ▹Familiarity with crypto, blockchain infrastructure, or financial services audit environments

Soft skills

What we offer

• ▹Annual base salary range (excluding equity and bonus): $130,900 - $154,000 USD, varying by location
• ▹Equity and bonus eligibility
• ▹Medical, dental, vision, and 401(k) benefits
• ▹Remote-first, but not remote-only company, with quarterly in-person 'surge' working sessions

About the company

Coinbase's mission is to increase economic freedom; a remote-first, but not remote-only company with a high bar and intense environment, holding quarterly in-person working sessions called 'surges'.