Senior Technology Auditor

As Marqeta’s Senior Technology Auditor
, you will play a pivotal role in ensuring the integrity and security of our technology operations by conducting comprehensive IT audits and SOX testing. You’ll be part of a collaborative Internal Audit team that works across departments to evaluate and strengthen Marqeta’s IT control environment. This role involves identifying and mitigating IT risks, providing actionable insights to leadership, and driving compliance efforts to support the company’s commitment to operational excellence and regulatory standards.

This role can be performed in a hybrid work model (Tuesday, Thursday onsite) from our Warsaw office. We’d love for you to join us!

• Lead and execute IT audits and SOX testing in accordance with PCAOB standards and external audit requirements, assessing the design and operating effectiveness of IT General Controls (ITGCs) over critical payment processing systems, infrastructure, and applications.
• Partner with cross-functional teams, including Engineering, Tech Ops, and Finance, throughout the full engagement — not just at the findings stage — to strengthen IT control environments and ensure remediation plans are practical and owned by the business, not just handed down
• Go beyond identifying issues by bringing forward practical, actionable recommendations, and stay engaged through remediation to help ensure fixes are implemented effectively.
• Own the execution of assigned SOX testing areas — including key reports, IT application controls (ITACs), and ITGCs — managing testing through to completion with minimal oversight, confirming controls are properly designed to address the risks they're intended to mitigate, contributing input on scoping, and coordinating directly with external auditors on requests, meetings, and walkthroughs.
• Identify and assess risks related to IT systems, Dev Ops, cloud infrastructure, and cybersecurity, providing actionable recommendations to mitigate vulnerabilities and enhance operational resilience.
• Draft clear, data-driven sections of audit reports covering findings, control deficiencies, and remediation recommendations, ensuring risks and solutions are communicated in a way that's actionable for stakeholders.
• Drive innovation and continuous improvement by identifying opportunities to automate controls, streamline audit processes, and enhance compliance frameworks.

• A technology audit professional with 5+ years of experience in IT auditing, SOX compliance, and risk assessments, preferably within payment processing or highly regulated industries.
• Proficient in evaluating IT General Controls (ITGCs) and Application Controls, with expertise in testing areas such as Identity and Access Management (IAM), Change Management, and IT Operations.
• Experienced in reviewing SOC 1 reports, mapping vendor controls and complementary user entity controls (CUECs) to internal risks, and applying completeness and accuracy (C&A) principles to IPE (Information Produced by the Entity) or key report testing.
• Experienced in auditing modern cloud environments (e.g., AWS, Azure) and Dev Ops practices, with the ability to identify control gaps in dynamic, fast-paced technology ecosystems.
• A risk-first, big-picture thinker — sees potential failure points in systems and processes before they become issues, and connects risks and controls across the full process rather than evaluating any one piece in isolation.
• A strong communicator who can bridge the gap between technical and non-technical stakeholders, presenting complex audit findings in a clear and actionable manner.
• Strong time and project management skills — able to manage multiple tasks and work streams against deadlines, and proactively flags delays or roadblocks before they become a surprise.
• Genuinely curious and invested in continuous learning — stays current on evolving technology, risk, audit practices, and AI rather than relying on a fixed playbook.
• Detail-oriented, with the discipline to catch inconsistencies and gaps that a surface-level review would miss.

• Professional certifications such as CISA (Certified Information Systems Auditor), CISM (Certified…