Ready to do the most impactful work of your career? At Coinbase, we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, it’s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for "good enough," you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called “surges.” learn more about working at Coinbase.
As the Senior Manager, Internal IT & Security Audit, you'll lead Coinbase's global IT and security audit program. Reporting to the Head of Internal Audit, you will operate within an independent third line of defense that maintains functional accountability to the Audit Committee. You'll own the multi-year IT and security audit roadmap, ensuring coordinated coverage across all regions (US, EMEA, UK, APAC) and alignment with Coinbase's enterprise risk profile and regulatory expectations. Your leadership will directly strengthen how Coinbase identifies, evaluates, and mitigates technology and security risks across the organization.
What you'll do:
- Own the end-to-end delivery of complex, cross-functional IT and security audits covering cloud infrastructure, security operations, identity and access management, data protection, vendor/third-party risk, and key products and services.
- Lead and develop a high-performing global team of internal auditors and co-sourced resources, setting goals, coaching talent, managing performance, and building succession pipelines across regions.
- Drive integrated assurance across the three lines of defense by partnering with first and second line risk, compliance, security, and technology teams to rationalize testing and maximize control coverage.
- Shape executive-level reporting on technology and security control effectiveness, distilling key themes, emerging risks, and root causes into clear materials for senior management, the Head of Internal Audit, and the Audit Committee.
- Partner with technology and security leadership across Engineering, Security, Infrastructure, and Product to provide independent challenge on major initiatives (e.g., cloud migrations, new product launches, architecture changes) without compromising third-line independence.
- Build continuous improvement into the audit function by driving adoption of data analytics, automation, and generative AI to modernize IT and security audit execution, including continuous monitoring and automated evidence retrieval.
Required Skills & Experience:
- 12+ years of experience in internal audit with deep focus on IT and information security, or in first-line / second-line technology/security roles with significant controls and audit exposure.
- Demonstrated success leading global, cross-functional IT audit portfolios spanning cloud, infrastructure, cybersecurity, and third-party risk across multiple regulatory jurisdictions (US, EMEA, APAC).
- Deep technical knowledge of cloud-based technology stacks, software development lifecycles, cloud security configurations, and enterprise IT operations risks and controls.
- Relevant professional certifications (e.g., CISA, CISSP, CIA, CPA) and working fluency with frameworks such as NIST, COBIT, and ITIL.
- Proven leadership experience building, mentoring, and managing global audit teams, including co-sourced resources and indirect reports across time zones.
- Utilizes generative AI responsibly, maintaining human oversight to deliver business-ready outputs and drive measurable improvements in workflow efficiency, cost, and quality.
Req ID: #P76564
#LI-Remote
Pay Transparency Notice: Base salary varies by location (see range below). Total compensation may also include equity and bonus eligibility, and benefits (medical, dental, vision, 401(k)).
Please be advised that each candidate may submit a maximum of four applications within any 30-day period. We encourage you to carefully evaluate how your skills and interests align with Coinbase's roles before applying.
Commitment to Equal OpportunityCoinbase is proud to be an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, creed, gender, national origin, age, disability, veteran status, sex, gender expression or identity, sexual orientation or any other basis protected by applicable law. Coinbase will also consider for employment qualified applicants with criminal histories in a manner consistent with applicable federal, state and local law. For US applicants, you may view the Employee Rights and the Know Your Rights notices by clicking on their corresponding links. Additionally, Coinbase participates in the E-Verify program in certain locations, as required by law.
Coinbase is also committed to providing reasonable accommodations to individuals with disabilities. If you need a reasonable accommodation because of a disability for any part of the employment process, please contact us at accommodations[at]coinbase.com to let us know the nature of your request and your contact information. For quick access to screen reading technology compatible with this site click here to download a free compatible screen reader (free step by step tutorial can be found here).
Global Data Privacy Notice for Job Candidates and ApplicantsDepending on your location, the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA) may regulate the way we manage the data of job applicants. Our full notice outlining how data will be processed as part of the application procedure for applicable locations is available here. By submitting your application, you are agreeing to our use and processing of your data as required. For US applicants only, by submitting your application you are agreeing to arbitration of disputes as outlined here.
AI DisclosureFor select roles, Coinbase is piloting an AI tool based on machine learning technologies to conduct initial screening interviews to qualified applicants. The tool simulates realistic interview scenarios and engages in dynamic conversation. A human recruiter will review your interview responses, provided in the form of a voice recording and/or transcript, to assess them against the qualifications and characteristics outlined in the job description.
For select roles, Coinbase is also piloting an AI interview intelligence platform to transcribe and summarize interview notes, allowing our interviewers to fully focus on you as the candidate.
The above pilots are for testing purposes and Coinbase will not use AI to make decisions impacting employment. To request a reasonable accommodation due to disability, please contact accommodations[at]coinbase.com
Skills Required
- 12+ years of internal audit experience with deep focus on IT and information security, or equivalent first-/second-line technology/security experience with audit exposure
- Proven experience owning end-to-end delivery of complex, cross-functional IT and security audits covering cloud infrastructure, security operations, IAM, data protection, and vendor/third-party risk
- Experience leading global, cross-functional IT audit portfolios across multiple regulatory jurisdictions (US, EMEA, APAC)
- Deep technical knowledge of cloud-based technology stacks, software development lifecycles (SDLC), cloud security configurations, and enterprise IT operations risks and controls
- Relevant professional certifications (e.g., CISA, CISSP, CIA, CPA)
- Working fluency with frameworks such as NIST, COBIT, and ITIL
- Proven leadership building, mentoring, and managing global audit teams, including co-sourced resources and indirect reports across time zones
- Experience partnering with first- and second-line risk, compliance, security, and technology teams to drive integrated assurance
- Experience shaping executive-level reporting and presenting audit findings and risk themes to senior management and Audit Committee
- Experience driving adoption of data analytics, automation, and generative AI to modernize audit execution, including continuous monitoring and automated evidence retrieval
What the Team is Saying
_0.png)
_0.png)
Coinbase Compensation & Benefits Highlights
How does Coinbase ensure its pay and bonus plans are competitive?
Coinbase uses a market-driven, pay-for-performance approach to keep pay and bonus plans competitive. Coinbase regularly benchmarks roles against leading technology and fintech companies using external market data and reviews its compensation programs on a recurring basis to ensure salary, bonus, and equity remain aligned with the broader market and business goals. Annual bonus and equity programs are tied to both company results and individual impact, so when Coinbase and its people perform, total rewards reflect that performance.
Coinbase Insights
What We Do
Crypto creates economic freedom by ensuring that people can participate fairly in the economy, and Coinbase (NASDAQ: COIN) is on a mission to increase economic freedom for more than 1 billion people. We’re updating the century-old financial system by providing a trusted platform that makes it easy for people and institutions to engage with crypto assets, including trading, staking, safekeeping, spending, and fast, free global transfers. We also provide critical infrastructure for onchain activity and support builders who share our vision that onchain is the new online. And together with the crypto community, we advocate for responsible rules to make the benefits of crypto available around the world.
Why Work With Us
We have the opportunity to accelerate the pace of innovation in the world by building an open financial system. Our vision is to create more economic freedom in the world, to help people control their own wealth, start companies, have financial privacy, and participate in the global economy. And to get us there, we focus, build and move as a team.
Gallery
Coinbase Teams
Coinbase Offices
Remote Workspace
Employees work remotely.
Coinbase is remote-first, which enables us to innovate, build and move quickly. Our teams are able to work effectively from around the globe with time for in-person offsites and team meetups to enhance collaboration and connection.
.png)
