Senior IT Internal Auditor

What are we building?

Hard Rock Digital is a fiercely focused team working to become the best online sportsbook, casino, and social gaming company in the world. We're building a deeply curious team with a passion for learning, operating, and building new products and technologies for millions of consumers. We're customer-obsessed — we care about each customer interaction, experience, behavior, and insight, and strive to ensure we're always acting authentically.

Rooted in the kindred spirits of Hard Rock and the Seminole Tribe of Florida, Hard Rock Digital taps a brand known the world over as the leader in gaming, entertainment, and hospitality. We're taking that foundation of success and bringing it to the digital space - ready to join us?

What’s the position?

As the Senior IT Internal Auditor, you will execute a risk-based audit plan that supports responsible growth, protects the integrity and security of our technology platforms, and strengthens IT general controls and technology risk management across our cloud infrastructure, applications, and data environments. You will work cross-functionally with leaders from Technology & Security, Finance, Operations, and Legal and Compliance to assess risks, evaluate the company’s control environment, and deliver actionable insights that support strategic objectives.

In this role, you will contribute to building a culture of accountability and continuous improvement by translating audit objectives into meaningful business and technology enhancements, identifying improvement opportunities, and helping to ensure the company is well-positioned to scale responsibly and meet regulatory expectations. The ideal candidate will combine strong IT audit fundamentals with experience auditing cloud platforms and a growing understanding of digital platforms, online transactions, and gaming operations.

Key responsibilities:

• Support the development and execution of a risk-based internal audit plan aligned with the company’s strategic objectives and goals.

• Assist in performing periodic risk assessments and evaluating the design and adequacy of the company’s IT risk and control framework.

• Lead and execute ITGC audits covering logical access, change management, IT operations, and data integrity across cloud infrastructure and critical business applications.

• Perform other technology audits, such as cloud security, identity and access management, vulnerability management, and backup and disaster recovery.

• Perform walkthroughs and control testing across IT general controls (ITGCs) and application controls supporting internal controls over financial reporting and key technology processes.

• Collaborate with Information Security and Compliance teams to align audit activities with applicable gaming regulations, technical standards, PCI and data privacy requirements across jurisdictions.

• Assess IT risks related to third-party and cloud service providers, including review of SOC 1 and SOC 2 reports.

• Test the completeness and accuracy of information produced by the entity (IPE), including system-generated reports and queries used in key controls.

• Leverage data analytics and technology-enabled audit techniques to evaluate automated controls, identify trends and anomalies, and assess emerging risks associated with cloud systems and artificial intelligence.

• Prepare clear and concise audit documentation and reports, summarizing findings and recommendations for improvement.

• Partner with stakeholders to communicate audit results and support appropriate remediation efforts.

• Build strong working relationships with internal stakeholders and external auditors to streamline audit activities and knowledge sharing.

• Remain current on technology and cybersecurity risks, regulatory developments, and internal audit best practices.