Technology Internal Audit Senior

Scopely•Culver City, CA

14h•$113,000 - $135,000•Onsite

About The Position

We are seeking a Technology Internal Audit Senior to support the expansion of the Internal Audit function at Scopely, based in Culver City, California. This role will report to the Director of Technology Internal Audit and be instrumental in evaluating the technology, security and AI environment that our games and platforms run on. The ideal candidate will have a minimum of 4 years of professional experience in technology audit, technology risk, or security assurance, with a working understanding of IT controls and how those controls operate in a modern cloud and continuous delivery environment. A strong interest in the gaming or technology sectors and prior experience navigating dynamic, fast-paced environments are highly desirable.

Requirements

Minimum 4 years of progressive professional experience in technology audit, technology risk, or security assurance (Big 4 and/or relevant in-house technology audit function preferred) with a foundational understanding of Global Internal Audit Standards (GIAS) and governance frameworks such as COSO, COBIT, NIST, and ISO27001
Practical familiarity with AWS and/or GCP including the associated risks and controls. Comfort navigating a cloud-native environment with no on-premise infrastructure
Understanding of modern software development and release practices, including version control, code review, automated testing, and deployment pipelines. Experience auditing or assessing controls in an engineering-driven organization where development teams own significant parts of the control environment.
Bachelor’s degree in Information Systems, Computer Science, Accounting, or related field
Ability to explain findings to non-audit and/or non-technical stakeholders in a clear and collaborative manner, and to hold credible technical conversations with engineers. Ability to work collaboratively with international teams across various time zones and locations
A curious, "problem-solver" attitude with a strong attention to detail. The ideal candidate will be comfortable working in a fast-paced, entrepreneurial environment characterized by rapid change, and will be willing to work in areas where a defined audit program does not yet exist

Nice To Haves

A strong interest in the gaming or technology sectors and prior experience navigating dynamic, fast-paced environments are highly desirable.
Ability to work with data using SQL, Python, or similar is a strong plus
Experience working in the gaming industry or related entertainment/technology sectors is a plus
Professional certification (e.g., CISA, CPA) or a demonstrated interest in obtaining one is highly desirable

Responsibilities

Participate in audit planning and be primarily responsible for the execution of technology-focused operational audits. This includes performing walkthroughs with engineering and platform owners, evaluating technology risk and controls, and accurately documenting findings
Evaluate controls in the public cloud environment, including identity and access management, network configurations, logging and monitoring, and infrastructure as code considerations. Assess how changes move through CI/CD pipelines and identify key control and risk points
Perform audits over security domains including vulnerability and patch management, endpoint security, incident response, backup and disaster recovery, and third party risk
Analyze root causes of control deficiencies and propose pragmatic, technology-driven remediation strategies. Continue to seek innovative ways to utilize AI tools and advanced analytics to facilitate efficiencies and enhance effectiveness across the entire auditing lifecycle
Work closely with Technology, Security, AI, Infrastructure, and other key stakeholder functions to understand their workflows and verify that technology risks are being managed effectively. Build credibility with technical audiences by understanding their processes and constraints before proposing changes
Prepare clear, concise, and comprehensive workpapers and audit reports for senior leadership
Maintain continuous awareness of current gaming industry trends, regulatory changes, and advancements in audit technology, such as AI-assisted testing methodologies