Job Opportunities API

The Public Ledger of Openings

← Back to the ledger

Senior IT Infrastructure Auditor

bamboo
Companybamboo
CategoryFinance
Location
Remote
EmploymentNot stated
LevelSenior
SalaryNot stated by the employer
Posted15 Jun 2026
Last verified7 Aug 2026
SourceEmployer ATS (teamtailor)
Applications are handled by the employer, not by us.Apply on the employer's site →
Description
Scope of Role As a Senior IT Infrastructure Auditor, you will ensure the technical integrity, regulatory alignment, and operational resilience of Bamboo’s platforms that facilitate money movement and exchange of value. You will use your deep understanding of systems architecture, access governance, and compliance frameworks to analyze current networks, create more robust internal processes, proactively mitigate operational risks, and create a highly reliable, compliant environment. You will bring senior-level systems integrity expertise to the team, lead technical compliance specifications, participate in cross-functional syncs, and ensure safe, efficient scaling of our infrastructure. As a senior Individual Contributor, your role is central to anchoring the technical execution of critical risk-mitigation and compliance projects. You will act as a technical multiplier, taking on high-impact implementations and ensuring that technical delivery aligns with our data guidelines, strict regulatory mandates, and platform uptime goals. Note: Please do not apply if your expertise is within Microsoft products only. What you will be doing: Work with engineering teams, the Legal team, and the Compliance team across Bamboo on project definition, technical specification, and monitoring as we scale Bamboo’s internal systems and products. Architect, implement, and audit Identity and Access Management (IAM), endpoint management (MDM), and zero-trust architectures to protect the company’s data and customer assets. Drive proactive monitoring, capacity planning, and system integrity management to ensure a 99.9% system uptime across all core services, ensuring our technical compliance and access controls never break because of scale. Stay continuously up to date with industry trends, global reports on operational breaches, and emerging attack vectors, thoroughly analyzing these trends to architect preemptive mitigation and system-hardening strategies. Support incident response team efforts for internal anomalies or technical compliance breaches, executing rigorous root-cause analysis and post-mortems to continuously harden our infrastructure. Maintain and oversee compliance-driven tooling (such as SIEM platforms, network traffic analyzers, and access gateways), ensuring all internal configurations meet SOC 2, ISO 27001, and local data protection standards. Actively mentor junior and mid-level IT engineers through knowledge sharing, policy creation, and thorough process reviews, increasing the team's capabilities without taking on formal managerial tracking. Safely leverage AI tools within your daily compliance auditing and log-monitoring workflows to model faster anomaly detection practices for the broader IT team, ensuring all AI-assisted operations adhere strictly to Bamboo's data sovereignty and privacy standards. Ensure all technical operations meet regulatory requirements (GDPR, HIPAA, FinTech regulations) Conduct regular risk assessments and manage the Business Continuity and Disaster Recovery (BCDR) plans. Develop and enforce company-wide IT policies, including Access Control and Data Privacy standards. Oversee lifecycle management, inventory governance, and secure provisioning of IT assets while providing troubleshooting and remediation across endpoints, systems, and compliance tools. Who You Are You have 4+ years of experience in DevOps, technical compliance, systems engineering, and network administration in the fintech industry or on a scaling consumer product. Demonstrated mastery of corporate infrastructure tools, Identity Providers (e.g., Google Workspace, Okta), and endpoint management solutions (e.g., Jamf, Intune). Deep understanding of technical compliance frameworks (e.g., SOC 2, ISO 27001) and how to translate legal/regulatory requirements into strict infrastructure configurations. Proven experience with network integri