Ready to be pushed beyond what you think you’re capable of? At Coinbase, our mission is to increase economic freedom in the world. It’s a massive, ambitious opportunity that demands the best of us, every day, as we build the emerging onchain platform — and with it, the future global financial system. To achieve our mission, we’re seeking a very specific candidate. We want someone who is passionate about our mission and who believes in the power of crypto and blockchain technology to update the financial system. We want someone who is eager to leave their mark on the world, who relishes the pressure and privilege of working with high caliber colleagues, and who actively seeks feedback to keep leveling up. We want someone who will run towards, not away from, solving the company’s hardest problems. Our work culture is intense and isn’t for everyone. But if you want to build the future alongside others who excel in their disciplines and expect the same from you, there’s no better place to be. While many roles at Coinbase are remote-first, we are not remote-only. In-person participation is required throughout the year. Team and company-wide offsites are held multiple times annually to foster collaboration, connection, and alignment. Attendance is expected and fully supported. Team/ Role Paragraph: The Coinbase Internal Audit is an independent, third line function that reports directly to the Coinbase Audit Committee. The purpose and mission of Internal Audit is to objectively evaluate and audit the effectiveness of governance, compliance, risk management, and control process. The in-house Coinbase Internal Audit team is responsible for strategic analysis, risk assessments, development of the audit plan, project management, quality review, report issuance and issue validation across IT and business functions. By executing all aspects of audits, including planning, walkthroughs, testing, deficiency remediation, and report writing in accordance with the regulatory requirements, you'll play a key role in strengthening our position as the industry leader by evaluating the effectiveness of management’s ability to control potential events or threats and ultimately add value to all our stakeholders What you’ll be doing (ie. job duties): Set strategic direction for IT & security audit as a senior leader within the global internal audit team, owning the multi‑year IT and security audit roadmap and aligning it with Coinbase’s enterprise risk profile, technology strategy, and regulatory expectations across regions (US, EMEA, APAC). Lead Coinbase’s global IT & security audit portfolio, ensuring coordinated coverage across all regions (including EMEA, US, UK, and APAC), and integration with broader global audit plans, co‑sourced partners, and cross‑functional risk initiatives. Act as a subject‑matter expert on global technology and security regulations, with deep understanding of EMEA requirements and strong familiarity with other key jurisdictions (e.g., US, UK, APAC) as they relate to information technology, cybersecurity, operational resilience, outsourcing, and broader financial services regulation applicable to Coinbase. Own end‑to‑end delivery of complex, cross‑functional IT and security audits, from risk assessment and scoping through planning, fieldwork oversight, reporting, and issue validation, ensuring coverage of cloud, infrastructure, security operations, identity and access management, data protection, IT asset management, vendor/third‑party risk, and key in‑scope products and services. Provide executive‑level reporting and insight on the effectiveness of technology and security controls, distilling key themes, emerging risks, and root causes into clear, concise materials for senior management, the Chief Audit Executive, and the Audit Committee. Drive high‑impact, pragmatic remediation and control design by challenging and advising management on risk‑based, scalable solutions to issues identified during audits, emphasizing automation, standardization, and long‑term sustainability. Lead and develop a high‑performing team of internal auditors (and co‑sourced resources) focused on IT and security, including setting goals, providing coaching and feedback, managing performance, and building succession and talent pipelines across regions. Establish and oversee robust issue management for IT & security findings, ensuring timely, risk‑based remediation by management, high‑quality root cause analysis, and disciplined validation of remediation activities; escalate delays or thematic concerns to senior leadership as needed. Serve as the primary internal audit point of contact for technology and security leadership, building trusted relationships with senior leaders across Engineering, Security, Infrastructure, Product, and Operations while maintaining third line independence and objectivity. Coordinate integrated assurance across the three lines of defense, partnering with first and second line ris