Senior Technology Auditor

What You Will Need:

• Experience: Minimum 4 years of progressive professional experience in technology audit, technology risk, or security assurance (Big 4 and/or relevant in-house technology audit function preferred) with a foundational understanding of Global Internal Audit Standards (GIAS) and governance frameworks such as COSO, COBIT, NIST, and ISO27001
• Cloud Experience: Practical familiarity with AWS and/or GCP including the associated risks and controls. Comfort navigating a cloud-native environment with no on-premise infrastructure
• Engineering and CI/CD Fluency: Understanding of modern software development and release practices, including version control, code review, automated testing, and deployment pipelines. Experience auditing or assessing controls in an engineering-driven organization where development teams own significant parts of the control environment. Ability to work with data using SQL, Python, or similar is a strong plus
• Education: Bachelor's degree in Information Systems, Computer Science, Accounting, or related field
• Communication: Ability to explain findings to non-audit and/or non-technical stakeholders in a clear and collaborative manner, and to hold credible technical conversations with engineers. Ability to work collaboratively with international teams across various time zones and locations
• Mindset: A curious, "problem-solver" attitude with a strong attention to detail. The ideal candidate will be comfortable working in a fast-paced, entrepreneurial environment characterized by rapid change, and will be willing to work in areas where a defined audit program does not yet exist

• Industry Background: Experience working in the gaming industry or related entertainment/technology sectors is a plus
• Certifications: Professional certification (e.g., CISA, CPA) or a demonstrated interest in obtaining one is highly desirable

We are seeking a Senior Technology Auditor to support the expansion of the Internal Audit function at Scopely, based in Culver City, California. This role will report to the Director of Technology Internal Audit and be instrumental in evaluating the technology, security and AI environment that our games and platforms run on. The ideal candidate will have a minimum of 4 years of professional experience in technology audit, technology risk, or security assurance, with a working understanding of IT controls and how those controls operate in a modern cloud and continuous delivery environment. A strong interest in the gaming or technology sectors and prior experience navigating dynamic, fast-paced environments are highly desirable.

What You Will Do:

• Audit Execution: Participate in audit planning and be primarily responsible for the execution of technology-focused operational audits. This includes performing walkthroughs with engineering and platform owners, evaluating technology risk and controls, and accurately documenting findings
• Cloud and Engineering Risk Coverage: Evaluate controls in the public cloud environment, including identity and access management, network configurations, logging and monitoring, and infrastructure as code considerations. Assess how changes move through CI/CD pipelines and identify key control and risk points
• Cybersecurity and Resilience: Perform audits over security domains including vulnerability and patch management, endpoint security, incident response, backup and disaster recovery, and third party risk
• Identify Improvements: Analyze root causes of control deficiencies and propose pragmatic, technology-driven remediation strategies. Continue to seek innovative ways to utilize AI tools and advanced analytics to facilitate efficiencies and enhance effectiveness across the entire auditing lifecycle
• Collaborate Across Teams: Work closely with Technology, Security, AI, Infrastructure, and other key stakeholder functions to understand their workflows and verify that technology risks are being managed effectively. Build credibility with technical audiences by understanding their processes and constraints before proposing changes
• Reporting and Documentation: Prepare clear, concise, and comprehensive workpapers and audit reports for senior leadership
• Professional Development: Maintain continuous awareness of current gaming industry trends, regulatory changes, and advancements in audit technology, such as AI-assisted testing methodologies