Senior IT Internal Auditor

What are we building?

Hard Rock Digital is a fiercely focused team working to become the best online sportsbook, casino, and social gaming company in the world. We're building a deeply curious team with a passion for learning, operating, and building new products and technologies for millions of consumers. We're customer-obsessed — we care about each customer interaction, experience, behavior, and insight, and strive to ensure we're always acting authentically.

Rooted in the kindred spirits of Hard Rock and the Seminole Tribe of Florida, Hard Rock Digital taps a brand known the world over as the leader in gaming, entertainment, and hospitality. We're taking that foundation of success and bringing it to the digital space - ready to join us?

What’s the position?

As the Senior IT Internal Auditor, you will execute a risk-based audit plan that supports responsible growth, protects the integrity and security of our technology platforms, and strengthens IT general controls and technology risk management across our cloud infrastructure, applications, and data environments. You will work cross-functionally with leaders from Technology & Security, Finance, Operations, and Legal and Compliance to assess risks, evaluate the company’s control environment, and deliver actionable insights that support strategic objectives.

In this role, you will contribute to building a culture of accountability and continuous improvement by translating audit objectives into meaningful business and technology enhancements, identifying improvement opportunities, and helping to ensure the company is well-positioned to scale responsibly and meet regulatory expectations. The ideal candidate will combine strong IT audit fundamentals with experience auditing cloud platforms and a growing understanding of digital platforms, online transactions, and gaming operations.

Key responsibilities

• Support the development and execution of a risk-based internal audit plan aligned with the company’s strategic objectives and goals.

• Assist in performing periodic risk assessments and evaluating the design and adequacy of the company’s IT risk and control framework.

• Lead and execute ITGC audits covering logical access, change management, IT operations, and data integrity across cloud infrastructure and critical business applications.

• Perform other technology audits, such as cloud security, identity and access management, vulnerability management, and backup and disaster recovery.

• Perform walkthroughs and control testing across IT general controls (ITGCs) and application controls supporting internal controls over financial reporting and key technology processes.

• Collaborate with Information Security and Compliance teams to align audit activities with applicable gaming regulations, technical standards, PCI and data privacy requirements across jurisdictions.

• Assess IT risks related to third-party and cloud service providers, including review of SOC 1 and SOC 2 reports.

• Test the completeness and accuracy of information produced by the entity (IPE), including system-generated reports and queries used in key controls.

• Leverage data analytics and technology-enabled audit techniques to evaluate automated controls, identify trends and anomalies, and assess emerging risks associated with cloud systems and artificial intelligence.

• Prepare clear and concise audit documentation and reports, summarizing findings and recommendations for improvement.

• Partner with stakeholders to communicate audit results and support appropriate remediation efforts.

• Build strong working relationships with internal stakeholders and external auditors to streamline audit activities and knowledge sharing.

• Remain current on technology and cybersecurity risks, regulatory developments, and internal audit best practices.

What are we looking for?

• Bachelor’s degree in Computer Science, Information Systems, Accounting, Finance, or related field.

• 3+ years of IT audit experience in internal audit, information security, technology risk assurance or governance, risk and compliance roles.

• Professional certifications such as CISA, CISSP, CIA, cloud certifications (e.g., AWS), or other relevant credentials are a plus but not required.

• Strong understanding of IT general controls (ITGCs) and IT application controls supporting internal controls over financial reporting.

• Working knowledge of IT governance frameworks such as COSO, COBIT, NIST CSF and ISO 27001.

• Familiarity with reviewing SOC 1 and SOC 2 reports and evaluating related control implications.

• Experience auditing technology in regulated environments such as gaming, digital gaming, fintech, payments, or technology sectors desirable.

• Experience auditing cloud-based computing and data platforms (e.g., AWS, Snowflake) and identity and access management, with the ability to assess automated controls and system interfaces.

• Strong critical thinking and problem-solving skills and ability to prioritize risk, focus on impact, and deliver value through audit execution.

• Ability to work effectively across time zones and occasionally travel for strategic in-person working sessions.

What’s in it for you?

We offer our employees more than just competitive compensation. Our team benefits include:

• Competitive compensation and comprehensive benefits.

• Flexible vacation allowance.

• Remote or Hybrid Flexibility: Enjoy the flexibility of remote work, with opportunities for in-person collaboration at our various headquarter locations.

• Startup culture backed by a secure, global brand.

Roster of Uniques

We care deeply about every interaction our customers have with us, and trust and empower our staff to own and drive their experience. Our vision for our business and customers is built on fostering a diverse and inclusive work environment where regardless of background or beliefs you feel able to be authentic and bring all your talent into play. We want to celebrate you being you (we are an equal opportunity employer).