Internal Audit IT Manager

Ready to do the most impactful work of your career? At Coinbase , we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, it’s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for "good enough," you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called “surges.” learn more about working at Coinbase .

As an Internal Audit IT Manager, you'll join the Internal Audit team and own a portfolio of complex IT and security audits across Coinbase's global cloud infrastructure, security operations, and crypto-native products. This team delivers independent, third-line assurance over technology, information security, and IT governance, helping Coinbase protect customers and maintain trust at scale. . You'll shape audit coverage, ensure that findings from complex audit work are communicated appropriately to executive and Board-level audiences, and lead team members to build a best-in-class IT audit function.

What you'll do:

Own and coordinate a portfolio of IT and security audits covering cloud infrastructure (AWS, GCP), application security, identity and access management, vendor/third-party risk, and blockchain-related products including wallets and cold storage.

Shape the execution of the multi-year IT and security audit roadmap, coordinating coverage with co-sourced partners and aligning with enterprise risk initiatives.

Synthesize complex audit findings into high-impact reports and presentations for executive leadership, the Chief Audit Executive, and the Audit Committee, ensuring conclusions are rigorous and actionable.

Drive remediation strategy for IT and security findings, challenging management on risk-based solutions, validating corrective actions, and escalating thematic concerns to senior leadership.

Partner with senior technology and security leadership across Engineering, Security, and IT to deliver independent advisory value while maintaining third-line independence and objectivity.

Evaluate and develop audit talent, mentoring team members, assessing candidates, and contributing to the growth and modernization of the Internal Audit function.

Required Skills and Experience:

8+ years of experience in IT internal audit, information security audit, or first-line technology/security operations, with demonstrated experience managing audit teams, processes, and co-sourced engagements.

Hands-on audit experience with cloud platforms (AWS, GCP), including IAM policies, security configurations, encryption, logging, and network architecture.

Relevant professional certifications (e.g., CISA, CISSP, CIA, or CISM) required; working knowledge of frameworks such as NIST CSF, COBIT, SOC 2, and ITIL.

Proven ability to manage multiple concurrent audits and initiatives across time zones (EMEA, APAC), presenting findings and recommendations to executive and Board-level audiences.

Experience in crypto, blockchain infrastructure, or financial services audit environments.

Utilizes generative AI responsibly, maintaining human oversight to deliver business-ready outputs and drive measurable improvements in workflow efficiency, cost, and quality.

P76564

#LI-Remote

Pay Transparency Notice: Base salary varies by location (see range below). Total compensation may also include equity and bonus eligibility, and benefits (medical, dental, vision, 401(k)).

Annual base salary range (excluding equity and bonus):

$166,345 — $195,700 USD

Application Limit: Candidates may submit a maximum of 3 applications within a 6-month period.

Equal Opportunity Employer: Coinbase is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or genetic information. Applicants with criminal histories will be considered consistent with applicable federal, state, and local laws.

US Applicants: View Employee Rights , Know Your Rights , and E-Verify Notice of Participation.