Senior Manager, Security Audit

As Senior Manager, Security Audit at Coinbase, you lead the Internal Audit team's global coverage of information security, cybersecurity, and infrastructure/application security. Reporting to the Global Head of Internal Audit, you own the security audit portfolio spanning identity and access management, threat detection, incident response, cloud security, application security, and crypto-native controls, while managing a small team and carrying your own book of complex audits.

What you'll do

• Own and lead Coinbase's global security audit portfolio covering IAM, threat detection, incident response, security architecture, cryptography/key management, vulnerability management, application security, and crypto-native security including wallets, cold storage, and third-party/outsourced security oversight.
• Partner with Security Engineering, Detection & Response, and AppSec teams as the cybersecurity subject matter expert, providing independent audit perspective and advisory value while maintaining third-line objectivity.
• Manage and develop a team of security auditors while personally leading high-complexity, high-risk security engagements across multiple jurisdictions.
• Synthesize complex technical security findings into clear, risk-prioritized reports for executive leadership, the Audit Committee, and the Board.
• Drive proactive identification of emerging threats, including crypto/blockchain attack vectors, AI/ML security risks, and supply chain risks, adjusting audit coverage and methodology accordingly.
• Champion security data analytics and AI tooling such as automated log and evidence analysis to modernize the security audit function.

What you bring

• 12+ years in internal audit or security engineering/operations with demonstrated leadership of cybersecurity-focused audits or security programs, including direct team management while carrying an individual portfolio.
• Deep, hands-on expertise in at least 2-3 of: IAM, threat detection/SOC, incident response, security architecture, cryptography/key management, cloud security (AWS or GCP), or application security.
• A relevant security certification: CISSP, CISM, CCSP, or CCSK.
• Proven ability to navigate multi-jurisdictional cybersecurity regulatory regimes including NYDFS, SOC frameworks, OCC guidance, and multi-state examiner requirements, and translate them into audit coverage.
• Demonstrated success communicating deeply technical security concepts to executive and Board-level audiences through written reports and presentations.
• The ability to utilize generative AI responsibly, maintaining human oversight to deliver business-ready outputs and drive measurable improvements in workflow efficiency, cost, and quality.

Nice to have

• CISA certification.

What we offer

• Annual base salary of $201,365 to $236,900 USD, depending on location.
• Total compensation may include equity and bonus eligibility.
• Benefits including medical, dental, vision, and 401(k).
• Remote-first work with quarterly in-person "surge" sessions for intense collaborative working.

About Coinbase

Coinbase is building the future of finance with a mission to increase economic freedom. The company operates as a remote-first organization with a high bar for impact and intensity.