Head of Information Technology Audit
Listed on 2026-10-13
-
IT/Tech
Cybersecurity, FinTech, Information Security & Data Protection, IT Support
Head of IT Audit (Payments Focus) | San Jose, CA
The Audit & Risk Recruitment Company is supporting a fast-paced, innovative global technology organisation in hiring their first leader in IT Internal Audit to join its international Tech Governance team in San Jose, California (USA).
This is a senior opportunity for someone with deep expertise across IT Internal Audit, IT Compliance and Digital Risk across payments, fintech, lending, regulated financial products and technology risk
. It is brilliant for those with deep experience in working with global regulations, engineering teams, tech teams and audit in order to provide solid IT Assurance to the business.
It includes a truly global scope across the US, EMEA and Asia offering 25% travel and an in-office culture (5 x per week in the office, however, with flexible working hours). You must be comfortable with going into the office.
An excellent role for those who thrive in a dynamic, collaborative environment and looking to build a new payments segment within a very strong brand. You will influence the rapid growth of the business with concrete opportunities to build a team in the future.
The role:
- Develop and execute technology audit strategies covering payments, lending and other regulated financial products. You will be the expert in the team for the payments segment of the business.
- Lead complex, risk-based technology audits and advisory reviews from scoping through executive reporting.
- Provide subject-matter expertise across payment systems, digital wallets, payment processing and financial infrastructure.
- Build, establish and audit end-to-end payment processing in areas like: payment authorisation, clearing and settlement across consumer, merchant, and platform payment flows.
- Assess technology, cybersecurity, operational resilience, data and regulatory risks.
- Engage directly with payment regulators and financial regulators across international markets.
- Partner closely with engineering, product and business teams to provide credible technical challenge and practical risk recommendations.
- Help shape the audit and assurance approach for rapidly evolving financial products across multiple jurisdictions.
Requirements:
- Minimum 10+ years’ experience in IT Audit, ideally over 14 years, preferably from the Big 4 and/or industry within payments, fintech, lending, technology, e-commerce or other regulatory environments. If you are in any other industry but working directly in the payments part, do apply.
- Strong knowledge of payment regulations and technology control environments.
- Experience developing audit plans and leading complex technology audits across APAC and/or EMEA
. - Previous experience engaging with regulators, particularly around payments or money-transmission activities is helpful.
- Strong understanding of complex technology environments; data flows and control frameworks.
- Knowledge of any of the following is also advantageous: encryption, tokenisation, payment security and API security.
- Excellent critical-thinking and problem-solving skills.
- Ability to operate confidently with senior executives, engineers, product teams and regulatory stakeholders.
- Exposure to areas such as PCI DSS, PSD2, Strong Customer Authentication, operational resilience, digital wallets, open banking and consumer lending.
- Experience with SQL, Python, data analytics or technology-enabled audit techniques
, alongside qualifications such as CISA, CISSP, CRISC, CAMS or CIA
, would also be advantageous, but not essential.
** No sponsorship can be offered for international candidates, you must be based in the US. Those in the US who may need sponsorship, could be considered.
** You must be comfortable with the office and working with different time zones.
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).