Senior Technology Auditor

As Marqeta’s Senior Technology Auditor, you will play a pivotal role in ensuring the integrity and security of our technology operations by conducting comprehensive IT audits and SOX testing. You’ll be part of a collaborative Internal Audit team that works across departments to evaluate and strengthen Marqeta’s IT control environment. This role involves identifying and mitigating IT risks, providing actionable insights to leadership, and driving compliance efforts to support the company’s commitment to operational excellence and regulatory standards.

• Lead and execute IT audits and SOX testing in accordance with PCAOB standards and external audit requirements, assessing the design and operating effectiveness of IT General Controls (ITGCs) over critical payment processing systems, infrastructure, and applications.
• Partner with cross-functional teams, including Engineering, TechOps, and Finance, throughout the full engagement — not just at the findings stage — to strengthen IT control environments and ensure remediation plans are practical and owned by the business, not just handed down
• Go beyond identifying issues by bringing forward practical, actionable recommendations, and stay engaged through remediation to help ensure fixes are implemented effectively.
• Own the execution of assigned SOX testing areas — including key reports, IT application controls (ITACs), and ITGCs — managing testing through to completion with minimal oversight, confirming controls are properly designed to address the risks they're intended to mitigate, contributing input on scoping, and coordinating directly with external auditors on requests, meetings, and walkthroughs.
• Identify and assess risks related to IT systems, DevOps, cloud infrastructure, and cybersecurity, providing actionable recommendations to mitigate vulnerabilities and enhance operational resilience.
• Draft clear, data-driven sections of audit reports covering findings, control deficiencies, and remediation recommendations, ensuring risks and solutions are communicated in a way that's actionable for stakeholders.
• Drive innovation and continuous improvement by identifying opportunities to automate controls, streamline audit processes, and enhance compliance frameworks.

• A technology audit professional with 5+ years of experience in IT auditing, SOX compliance, and risk assessments, preferably within payment processing or highly regulated industries.
• Proficient in evaluating IT General Controls (ITGCs) and Application Controls, with expertise in testing areas such as Identity and Access Management (IAM), Change Management, and IT Operations.
• Experienced in reviewing SOC 1 reports, mapping vendor controls and complementary user entity controls (CUECs) to internal risks, and applying completeness and accuracy (C&A) principles to IPE (Information Produced by the Entity) or key report testing. 
• Experienced in auditing modern cloud environments (e.g., AWS, Azure) and DevOps practices, with the ability to identify control gaps in dynamic, fast-paced technology ecosystems.
• A risk-first, big-picture thinker — sees potential failure points in systems and processes before they become issues, and connects risks and controls across the full process rather than evaluating any one piece in isolation.
• A strong communicator who can bridge the gap between technical and non-technical stakeholders, presenting complex audit findings in a clear and actionable manner.
• Strong time and project management skills — able to manage multiple tasks and workstreams against deadlines, and proactively flags delays or roadblocks before they become a surprise.
• Genuinely curious and invested in continuous learning — stays current on evolving technology, risk, audit practices, and AI rather than relying on a fixed playbook.
• Detail-oriented, with the discipline to catch inconsistencies and gaps that a surface-level review would miss.

• Professional certifications such as CISA (Certified Information Systems Auditor), CISM (Certified Information Security Manager), or CIA (Certified Internal Auditor) to demonstrate expertise in IT auditing and compliance.
• Hands-on experience in the payment industry, with familiarity with regulatory frameworks such as PCI DSS, GDPR, or equivalent standards applicable to technology operations.
• Background with Big 4 accounting firms, showcasing strong foundational experience in IT audit methodologies, SOX compliance, and risk-based audit planning.
• Advanced knowledge of DevOps tools (e.g., Jenkins, GitHub, Kubernetes), secure software development life cycle (SSDLC), and identity management solutions for evaluating control design and implementation.
• Familiarity with automated audit tools, data analytics, and platforms such as AuditBoard to enhance the efficiency and accuracy of audit activities.
• Innovative, automation-first mindset — experience leveraging AI or scripting to automate manual audit tasks (e.g., evidence collection, testing procedures, control monitoring) or build tools that improve audit efficiency.
• End-to-end experience running SOX IT audits — from risk assessment and scoping through control design/testing, deficiency evaluation, and remediation validation..

• Arthur Huynh, Senior Manager, Technology Internal Audit

• Aga Wojciechowska 

• Application Submission
• Recruiter phone call
• Hiring manager video call
• Virtual “Onsite” consisting of 4-5, 45 min calls
• Offer!