IT Auditor

At Roofstacks, we are shaping the future through cutting-edge technologies including Extended Reality (AR/VR), Blockchain, Game Development, Fintech, and Tourism Systems. As we scale our operations and digital footprint, we are looking for a IT Auditor to ensure the integrity, efficiency, and security of our technology-driven environments. If you are an experienced auditor with deep knowledge of IT systems, a CISA certification, and a passion for emerging technologies like crypto and blockchain — we’d love to meet you.
🔍 Key Responsibilities
- Plan, execute, and lead end-to-end IT audits across infrastructure, applications, and security systems - Evaluate IT risks, general controls (ITGC), automated controls, and system development life cycles - Provide independent assurance on the design and effectiveness of IT processes and risk mitigation strategies - Collaborate with internal stakeholders (e.g., IT, Cybersecurity, Internal Control, Risk, Compliance) to strengthen the company’s control posture - Monitor compliance with internal policies, standards, and regulatory requirements - Prepare clear, concise audit reports and follow up on action plans and remediation efforts - Stay up-to-date on industry trends and best practices in IT governance, risk, and compliance
✅ Qualifications
-Minimum 7 years of experience in IT auditing, information systems control, or technology risk management - CISA certification is required (Certified Information Systems Auditor) - Strong understanding of ITGC, cybersecurity controls, infrastructure, and cloud environments - Experience working in fast-paced, tech-driven companies - Excellent communication, stakeholder management, and reporting skills - Professional proficiency in English
🌟 Nice-to-Have / Big Plus
- Hands-on experience or in-depth knowledge of cryptocurrencies, blockchain, or decentralized platforms - Experience in fintech, Web3, or crypto custody businesses - Familiarity with frameworks like COBIT, ISO 27001, NIST, SOC 2, etc. - Additional certifications (e.g., CRISC, CISSP, CIA)