Technical, Product & Operations Audit Lead - Hezardastan
Divar · Tehran
Hezardastan is the principal shareholder of a group of technology companies, including Divar, Karnameh, and Sotoon. As the scale and complexity of our products, infrastructure, data, and operations continue to grow, we are building an independent audit capability that extends beyond traditional financial auditing.
In this role, you will provide independent, evidence-based assurance over technical, product, and operational controls and decision-making processes. The initial focus will be on Divar, with the scope gradually extending to other Hezardastan companies and functions based on risk and business significance.
You may come from a senior engineering, infrastructure, reliability, security, or data role where you have gained meaningful experience assessing controls and complex incidents. We do not expect you to be an expert in technology, product, and operations simultaneously. What matters is genuine depth in at least one area, combined with the judgment and curiosity required to understand and challenge the others.
This role does not own business risks or implement remediation and should not become a mandatory approval gate for day-to-day decisions. Management teams retain ownership of their decisions, controls, and corrective actions, while Internal Audit independently assesses their adequacy and effectiveness.
Key Responsibilities
- Develop and continuously update a strong understanding of our business models, system architecture, product development lifecycle, and critical operational processes.
- Build a comprehensive audit universe and develop a risk-based audit plan focused on a limited number of high-impact, in-depth engagements.
- Lead audit engagements end to end, including defining objectives, scope, criteria, hypotheses, evidence requirements, testing methods, reporting, and follow-up.
- Assess technical and infrastructure areas such as system reliability and resilience, incident and change management, access controls, software development practices, data quality, cloud dependencies, and third-party management.
- Evaluate controls and decision-making processes across product and marketplace areas, including product metrics and experimentation, monetization and pricing, marketplace health, trust and safety, fraud and abuse, and material algorithmic or AI-based systems.
- Review significant operational processes, including revenue leakage, payments and refunds, contractor management, crisis preparedness, business continuity, and the effectiveness of post-incident actions.
- Assess auditability and traceability, including the adequacy and reliability of data, logs, metric definitions, documentation, change histories, and the ability to reconstruct material decisions, transactions, and incidents.
- Identify and report control blind spots and evidence limitations, and independently validate whether management’s corrective actions have effectively addressed the underlying risk.
- Use data analysis, automation, and approved AI tools responsibly to improve the coverage, speed, and quality of audit work.
- Deliver concise, well-supported, decision-useful reports to senior management and collaborate with specialists across engineering, product, data, security, legal, compliance, finance, and operations without duplicating their responsibilities.
Why This Role?
- Build a modern audit capability within one of Iran’s leading technology groups.
- Work on complex, real-world challenges at the intersection of technology, product, data, and operations.
- Influence the quality of decisions and controls across businesses serving millions of users.
- Collaborate with experienced leaders and specialists from a wide range of disciplines.
- Work in an environment that values professional independence, continuous learning, and meaningful impact, with Hezardastan’s standard benefits and well-being programs.
What Success Looks Like in the First Six Months
- You have developed a strong understanding of the organization, its technology, products, operations, and key stakeholders, and established an initial audit universe and first-year plan.
- You have assessed auditability and evidence readiness in priority areas and identified material gaps in data, logging, metric definitions, documentation, and traceability.
- You have completed the first high-impact audit engagements with well-supported findings, clear root causes, and reports that support management decision-making.
- You have established a practical process for tracking findings and independently validating corrective actions, while introducing the first repeatable, data-driven audit tests.
- You have earned the trust of senior leaders and specialist teams as an independent, fair, rigorous, and decision-oriented audit professional.
Requirements
- Demonstrated professional depth in at least one of the following areas: technology, infrastructure and reliability, data, security, or product.
- Experience leading an independent review, audit, control assessment, or complex incident analysis from scoping through reporting and follow-up.
- The ability to work directly with data, logs, metrics, and other forms of evidence and identify gaps, inconsistencies, or limitations in traceability.
- A solid understanding of how technology, product, operations, and business outcomes interact, with the ability to challenge evidence and reasoning without replacing domain owners.
- Strong systems thinking and the ability to distinguish isolated errors from process weaknesses and structural root causes.
- Sound professional judgment, including the ability to assess materiality and recommend responses proportionate to cost, complexity, and risk.
- The ability to write clear, concise reports and constructively challenge senior leaders and specialist teams.
- High standards of independence, integrity, confidentiality, and care when handling user data and sensitive company information.
- Sufficient English proficiency to work with technical documentation and professional standards.
- The ability to use AI tools critically and securely while recognizing their limitations and validating their outputs.
- Evidence of capability, judgment, and meaningful practical experience matters more to us than a particular academic degree or a specific number of years in a role.
Preferred Qualifications
- Experience working in a large-scale technology platform, online marketplace, or other complex digital business.
- Experience assessing areas such as cloud infrastructure, SRE, cybersecurity, data governance, privacy, fraud, trust and safety, or algorithmic and AI-based systems.
- Hands-on experience with SQL, Python, business intelligence platforms, or other data-analysis tools.
- Professional certifications such as CISA, CIA, CRISC, or similar credentials.
- Experience establishing or developing a technology audit or independent assurance capability.
- The ability to engage subject-matter experts, frame the right questions for them, and integrate their work into a coherent audit conclusion.
Benefits
- You'll have a great impact : Your contributions will be pivotal in our mission to serve millions of people.
- You’ll be part of a team that values craftsmanship , speed , and innovation .
- We offer flexible working hours , health insurance , and a culture that values learning and autonomy .
- You’ll be surrounded by people who care about doing great work — and enjoy it along the way.