Manager of Internal Audit, Circle

• 7+ years of hands-on IT audit experience, including cloud infrastructure, SaaS, and cybersecurity audits
• Deep understanding of ITGCs, identity and access management (IAM), network security, and system development lifecycle (SDLC)
• Demonstrated experience auditing within cloud-native environments (e.g., AWS, GCP) and modern tech stacks
• Familiarity with scripting or query languages (e.g., SQL, Python, Bash) to support control testing and data validation
• Strong grasp of SOX 404 IT compliance, NIST, ISO, or other IT audit frameworks
• Ability to translate complex technical findings into actionable insights for technical and executive stakeholders
• Bachelor's degree in Information Systems, Computer Science, Cybersecurity, or related field

Desirable

• As an Internal Audit Manager you’ll lead the execution of highly technical audits across Circle’s infrastructure, systems, and cybersecurity landscape
• You’ll develop and apply in-depth audit procedures to assess the effectiveness of IT controls, including cloud infrastructure, access management, data protection, and regulatory compliance
• Partnering closely with engineering, security, and risk teams, you’ll drive audit planning and testing execution, and deliver insights that improve the resilience and security of Circle’s technology environment
• Designing and executing risk-based audits focused on IT general controls (ITGC), infrastructure, cloud environments (e.g., AWS, GCP), and system configurations
• Assessing the effectiveness of access management, change management, backup, and recovery processes across critical systems
• Leading audits of third-party vendors, SaaS platforms, and internally developed systems to evaluate risk exposure and control adequacy
• Performing hands-on control testing across technology platforms, including log review, configuration assessments, and data validation
• Developing audit programs tailored to infrastructure and security risks, leveraging scripting and automation where applicable
• Conducting walkthroughs and control testing for SOX 404 IT components and supporting remediation validation
• Collaborating with engineering, DevOps, IT, and security teams to understand system architecture and control implementations
• Driving continuous improvement of audit methodology with a focus on integrating technology, data analytics, and automation
• Supporting the development of dashboards and audit tools to monitor IT risk indicators and internal control health
• Creating clear, actionable audit reports for technical and non-technical audiences, highlighting vulnerabilities and recommending remediation