Technical, Product & Operations Audit Lead - Hezardastan

Hezardastan is the principal shareholder of a group of technology companies, including Divar, Karnameh, and Sotoon. As the scale and complexity of our products, infrastructure, data, and operations continue to grow, we are building an independent audit capability that extends beyond traditional financial auditing.

In this role, you will provide independent, evidence-based assurance over technical, product, and operational controls and decision-making processes. The initial focus will be on Divar, with the scope gradually extending to other Hezardastan companies and functions based on risk and business significance.

You may come from a senior engineering, infrastructure, reliability, security, or data role where you have gained meaningful experience assessing controls and complex incidents. We do not expect you to be an expert in technology, product, and operations simultaneously. What matters is genuine depth in at least one area, combined with the judgment and curiosity required to understand and challenge the others.

This role does not own business risks or implement remediation and should not become a mandatory approval gate for day-to-day decisions. Management teams retain ownership of their decisions, controls, and corrective actions, while Internal Audit independently assesses their adequacy and effectiveness.

Key Responsibilities

• Develop and continuously update a strong understanding of our business models, system architecture, product development lifecycle, and critical operational processes.
• Build a comprehensive audit universe and develop a risk-based audit plan focused on a limited number of high-impact, in-depth engagements.
• Lead audit engagements end to end, including defining objectives, scope, criteria, hypotheses, evidence requirements, testing methods, reporting, and follow-up.
• Assess technical and infrastructure areas such as system reliability and resilience, incident and change management, access controls, software development practices, data quality, cloud dependencies, and third-party management.
• Evaluate controls and decision-making processes across product and marketplace areas, including product metrics and experimentation, monetization and pricing, marketplace health, trust and safety, fraud and abuse, and material algorithmic or AI-based systems.
• Review significant operational processes, including revenue leakage, payments and refunds, contractor management, crisis preparedness, business continuity, and the effectiveness of post-incident actions.
• Assess auditability and traceability, including the adequacy and reliability of data, logs, metric definitions, documentation, change histories, and the ability to reconstruct material decisions, transactions, and incidents.
• Identify and report control blind spots and evidence limitations, and independently validate whether management’s corrective actions have effectively addressed the underlying risk.
• Use data analysis, automation, and approved AI tools responsibly to improve the coverage, speed, and quality of audit work.
• Deliver concise, well-supported, decision-useful reports to senior management and collaborate with specialists across engineering, product, data, security, legal, compliance, finance, and operations without duplicating their responsibilities.

Why This Role?

• Build a modern audit capability within one of Iran’s leading technology groups.
• Work on complex, real-world challenges at the intersection of technology, product, data, and operations.
• Influence the quality of decisions and controls across businesses serving millions of users.
• Collaborate with experienced leaders and specialists from a wide range of disciplines.
• Work in an environment that values professional independence, continuous learning, and meaningful impact, with Hezardastan’s standard benefits and well-being programs.

What Success Looks Like in the First Six Months

• You have developed a strong understanding of the organization, its technology, products, operations, and key stakeholders, and established an initial audit universe and first-year plan.
• You have assessed auditability and evidence readiness in priority areas and identified material gaps in data, logging, metric definitions, documentation, and traceability.
• You have completed the first high-impact audit engagements with well-supported findings, clear root causes, and reports that support management decision-making.
• You have established a practical process for tracking findings and independently validating corrective actions, while introducing the first repeatable, data-driven audit tests.
• You have earned the trust of senior leaders and specialist teams as an independent, fair, rigorous, and decision-oriented audit professional.