Technical, Product & Operations Audit Lead

About the role

Hezardastan, which owns Divar, Karnameh and Sotoon, is building an independent audit capability beyond traditional financial auditing. The Technical, Product & Operations Audit Lead provides evidence-based assurance over technical, product and operational controls and decision-making, initially focusing on Divar before expanding to other Hezardastan companies. The role suits someone with deep experience in one area (engineering, infrastructure, reliability, security or data) and the judgment to understand and challenge the others.

Key responsibilities

• Understand business models, system architecture, product lifecycle and critical operational processes, then build a risk-based audit plan covering a few high-impact, in-depth engagements.
• Lead audits end to end: define objectives, scope, criteria, hypotheses, evidence needs, testing methods, reporting and follow-up.
• Assess technical and infrastructure areas such as reliability, incident and change management, access controls, software development, data quality, cloud dependencies and third-party management.
• Evaluate product and marketplace controls, including metrics and experimentation, monetization and pricing, marketplace health, trust and safety, fraud and abuse, and algorithmic or AI systems.
• Review operational processes such as revenue leakage, payments and refunds, contractor management, crisis preparedness and business continuity.
• Check auditability and traceability of data, logs, metrics, documentation and change histories.
• Report control blind spots, validate management's corrective actions, and use data analysis, automation and approved AI tools responsibly.
• Deliver concise, decision-useful reports to senior management and collaborate with specialists without duplicating their work.

Required profile

• Professional depth in at least one of: technology, infrastructure and reliability, data, security or product.
• Experience leading an independent review, audit, control assessment or complex incident analysis from scoping to reporting and follow-up.
• Ability to work directly with data, logs and metrics and to challenge evidence and reasoning without replacing domain owners.
• Strong systems thinking, professional judgment on materiality, and the ability to write clear reports.
• Sufficient English to work with technical documentation; ability to use AI tools critically and securely.
• High standards of independence, integrity and confidentiality.

Preferred qualifications

• Experience in a large-scale technology platform, online marketplace or complex digital business.
• Hands-on SQL, Python, BI platforms or similar data tools.
• Certifications such as CISA, CIA or CRISC.
• Experience establishing a technology audit or assurance capability.

What we offer

• Flexible working hours, health insurance and a culture of learning and autonomy.
• A modern audit capability within one of Iran's leading technology groups, with standard benefits and well-being programs.