Job Description

Internal Audit is a global function responsible for providing independent assurance and evaluating the company's risk management, governance and internal control processes to determine if they are designed and operating effectively. The Internal Audit team plans and executes audit projects according to our risk-based audit plan by evaluating operational, compliance, IT, and financial processes and controls. We work with business functions in addressing risks and improving the control environment through timely and comprehensive audit work and tracking of remediation actions until completion.

We are seeking an experienced Global Payments Technology Internal Audit Lead to join the Global Technology Audit team. The role will primarily support TikTok businesses operating outside China and will be responsible for leading audits and risk reviews across the company’s global payment, lending, and financial technology ecosystem. The individual will utilize innovative assurance methods to impact and influence positive business outcomes across payment products for TikTok.

This individual will report to the Head of Global Payments Technology Audit Leader and evaluate the technology, security, operational resilience, data, and regulatory risks associated with payment processing, digital wallets, merchant and creator payments, lending products, and supporting financial infrastructure. The role provides an opportunity to shape the audit strategy and assurance approach for rapidly evolving financial products operating across multiple jurisdictions.

Responsibilities

• Audit Delivery: Develop and execute the global Technology Audit strategy for payment, lending, and other regulated financial products across TikTok businesses outside China. Lead complex, risk-based technology audits and advisory reviews from planning through reporting, including risk assessment, scoping, control evaluation, testing, issue development, and executive communication.
• Payments and Financial Product Coverage: Lead or support reviews covering areas such as:
• Payment Technology Architecture and Platforms: Payment system architecture, including infrastructure, data flows, application controls, digital wallets, and stored-value products.
• End-to-End Payment Processing: Payment acceptance, authorization, clearing, settlement, reconciliation, and disbursement across consumer, merchant, and platform payment flows.
• Payment Security and Integrations: Encryption, tokenization, secure data transmission, API security, service-to-service authentication, and third-party integrations.
• Technology Risk Assessment: Develop practical, risk-based recommendations that address root causes while considering product, engineering, regulatory, and business requirements. Ability to grasp complex, home grown technology stack, comfortable speaking with engineers and product teams.
• Data Analytics / AI: Leverage data analytics to detect risk signals and unearth insights. Apply AI technologies to develop innovative AI-based audit solutions and perform audit testing. Communicate issues and recommendations to senior management. Collaborate with risk owners to ensure risk mitigation plans are developed and completed, tracking and reporting on the progress of the remediation plans on a regular basis.
• Stakeholder Relationships: Develop and maintain collaborative working relationships with management, understand the business to provide value-added services, and establish credibility as a management consultant and internal controls resource. Partner with engineering and product teams to advise on design and implementation of technology solutions.
• Quality Assurance: Ensure the overall quality and consistency of audit work, adhering to department and professional standards. Continuously seek opportunities for audit process improvement.

Minimum Qualifications

• At least 5 years of relevant experience in technology auditing, assessing financial technology (FinTech), regulated payment, or lending products.
• Experience leading complex technology audits or risk reviews independently from planning through reporting.
• Strong understanding of payment systems, financial transaction flows, technology architecture, and supporting control environments.
• Proven analytical ability to assess complex technology environments against risk assessment outcomes, industry best practices, internal standards and external regulatory requirements.
• Excellent problem solving, critical thinking, collaboration and communication skills combined with the ability to provide a credible technical challenge to the business.
• Strong professional judgment and the ability to make risk-based decisions in complex and evolving environments.

Preferred Qualifications

• Familiarity with payment regulatory requirements from Payment Services Directive (PSD2), Digital Operational Resilience Act (DORA), Payment Services Regulation (PSR), Anti-Money Laundering Directive (AMLD) - strong customer authentication, operational resilience, outsourcing, consumer lending, open banking, and financial data protection.
• Ability to evaluate complex technical environments and identify risks that may affect customers, financial integrity, regulatory compliance, or business operations.
• Experience with data analytics, automated audit testing, SQL, Python, or other technology-enabled audit techniques.
• Relevant professional certifications such as CISA, CISSP, CRISC, or CIA.
• Experience working in a fast-paced, global technology company or rapidly scaling financial technology environment across different time zones.