Senior Information Technology Auditor

DraftKings Inc. • Boston, MA

56d

About The Position

At DraftKings, AI is becoming an integral part of both our present and future, powering how work gets done today, guiding smarter decisions, and sparking bold ideas. It’s transforming how we enhance customer experiences, streamline operations, and unlock new possibilities. Our teams are energized by innovation and readily embrace emerging technology. We’re not waiting for the future to arrive. We’re shaping it, one bold step at a time. To those who see AI as a driver of progress, come build the future together. The Crown Is Yours As a Senior Information Technology Auditor, you’ll lead internal audits that evaluate the strength of our technology controls, risk posture, and compliance with standards like ISO 27001, PCI DSS, and SOC 2 Type II. You’ll bring deep expertise in IT governance and Business Continuity Planning to assess the organization’s resilience and readiness for disruption. Working cross-functionally with Engineering, Security, Compliance, Operations, and Risk Management, you’ll help drive a proactive approach to risk and strengthen operational continuity.

Requirements

• Bachelor’s Degree in Information Systems, Computer Science, Accounting, or a related field
• At least 7 years of experience in IT audit, information security, or technology risk within regulated or high-growth environments
• Strong knowledge of ISO 27001, PCI DSS, SOC 2 Type II, and IT governance frameworks such as COBIT, NIST, and COSO
• Experience auditing cloud platforms like AWS, Azure, or GCP, with a focus on evaluating security and compliance controls
• Familiarity with Business Continuity Planning and Disaster Recovery practices
• Proven ability to lead audits independently, manage executive-level stakeholders, and deliver clear, actionable insights

Nice To Haves

• Preferred certifications such as CISA, CISM, CRISC, or ISO 27001 Lead Auditor, with a detail-oriented and analytical mindset

Responsibilities

• Lead and execute internal and external IT audits, including scoping, fieldwork, reporting, and follow-up, to evaluate the effectiveness of IT controls.
• Conduct risk assessments to identify key technology risks, control gaps, and improvement opportunities across infrastructure, applications, and data systems.
• Evaluate compliance with regulatory frameworks such as ISO 27001, PCI DSS, and SOC 2 Type II, and assess IT general controls, access management, change management, and cloud security.
• Integrate Business Continuity Planning into audits by evaluating disaster recovery and resilience strategies for critical systems and processes.
• Partner with teams across Engineering, Security, Compliance, and Operations to develop and validate remediation plans and recommend control enhancements.
• Prepare clear, actionable audit reports that summarize findings, risk implications, and recommendations for management.
• Strengthen audit practices through data analytics, automation, and continuous monitoring, while staying informed on emerging IT risks and compliance trends.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 5,001-10,000 employees