Senior Internal Auditor, Technology at Kraken

Building the Future of Open Finance Payward - the parent company behind Kraken, NinjaTrader, Breakout, xStocks, Payward Services and CF Benchmarks - has spent the last 15 years building one of the most modern and globally accessible financial infrastructure platforms in the industry, built to advance an open, global financial system. Before you apply, we encourage you to explore our culture page to understand what drives us and how we work. The team Founded in 2011, Kraken is one of the world's longest-standing crypto platforms, trusted by over 10 million individuals and institutions across the globe. It offers spot trading, margin, futures, staking, and OTC services, with products built for both individual investors and institutional clients. Payward's Audit & Risk function operates as an Integrated Assurance organization, bringing together Internal Audit and Enterprise Risk Management under a unified risk oversight strategy. The function spans Internal Audit, SOX Compliance, and Enterprise Risk Management across multiple regulated entities and jurisdictions. Internal Audit partners with co-sourced providers, maintains direct reporting lines to the Global and Local Audit Committees, and is building a technology-forward assurance capability at the forefront of crypto and financial innovation. The opportunity You'll partner with Internal Audit leadership to execute the technology audit program, evaluating the design and operating effectiveness of controls across a broad IT environment - cybersecurity, identity and access management, the software development lifecycle, data and privacy, operational resilience, and AI. This is a hands-on role with real ownership over scope, stakeholders, and outcomes - you'll shape how safely Payward manages some of the highest-risks it carries. You'll be doing it at a crypto exchange - where the infrastructure spans blockchain-native systems and digital asset custody, deployment cycles are fast, and client trust depends on getting the controls right. If you want technology audit work where the systems are genuinely complex and the stakes matter, this is it. Responsibilities span the following areas: Technology audit execution Plan and execute technology audits across a broad IT environment - cybersecurity, cloud, identity and access management, the software development lifecycle (SDLC) and change management Assess the security of core systems holding sensitive customer records and identity documentation - access controls, data protection, monitoring, and regulatory and policy compliance Assess operational resilience (business continuity, disaster recovery, and resilience testing), incident management, technology risk management, and third-party technology oversight Review data governance, privacy, and data-lake controls, and assess AI governance, security, and privacy across the organization's use of AI and machine-learning systems Test the design and operating effectiveness of IT general controls and applicati