RoofStacks is hiring a

Web3 IT Auditor

At Roofstacks, we are shaping the future through cutting-edge technologies including Extended Reality (AR/VR), Blockchain, Game Development, Fintech, and Tourism Systems. As we scale our operations and digital footprint, we are looking for a IT Auditor to ensure the integrity, efficiency, and security of our technology-driven environments.

If you are an experienced auditor with deep knowledge of IT systems, a CISA certification, and a passion for emerging technologies like crypto and blockchain — we’d love to meet you.

🔍 Key Responsibilities

- Plan, execute, and lead end-to-end IT audits across infrastructure, applications, and security systems

- Evaluate IT risks, general controls (ITGC), automated controls, and system development life cycles

- Provide independent assurance on the design and effectiveness of IT processes and risk mitigation strategies

- Collaborate with internal stakeholders (e.g., IT, Cybersecurity, Internal Control, Risk, Compliance) to strengthen the company’s control posture

- Monitor compliance with internal policies, standards, and regulatory requirements

- Prepare clear, concise audit reports and follow up on action plans and remediation efforts

- Stay up-to-date on industry trends and best practices in IT governance, risk, and compliance

✅ Qualifications

-Minimum 7 years of experience in IT auditing, information systems control, or technology risk management

- CISA certification is required (Certified Information Systems Auditor)

- Strong understanding of ITGC, cybersecurity controls, infrastructure, and cloud environments

- Experience working in fast-paced, tech-driven companies

- Excellent communication, stakeholder management, and reporting skills

- Professional proficiency in English

🌟 Nice-to-Have / Big Plus

- Hands-on experience or in-depth knowledge of cryptocurrencies, blockchain, or decentralized platforms

- Experience in fintech, Web3, or crypto custody businesses

- Familiarity with frameworks like COBIT, ISO 27001, NIST, SOC 2, etc.

- Additional certifications (e.g., CRISC, CISSP, CIA)