API & Database Auditor

About the role

The API & Database Auditor will evaluate the design, security, reliability, and compliance of Moniepoint’s APIs and relational database systems. You will ensure that data access, processing, storage, and protection meet internal controls and regulatory standards.

Key responsibilities

• Audit REST, GraphQL and internal APIs for governance, versioning, lifecycle management and compliance with standards such as SOC 2, ISO 27001, PCI DSS, HIPAA and GDPR.
• Assess database security controls across MySQL, PostgreSQL, SQL Server and Oracle, focusing on data integrity, availability and confidentiality.
• Identify risks related to authentication, authorization, rate limiting, input validation and common threats like injection attacks.
• Review encryption practices, secrets management, patching, vulnerability management and hardening of databases and APIs.
• Evaluate data classification, retention, deletion policies, schema design, indexing, referential integrity and audit trails.
• Examine backup, replication, disaster recovery, performance monitoring, capacity planning and change‑management processes.
• Document findings, provide remediation recommendations and track corrective actions with engineering, security and data‑governance teams.

Required profile

• Strong analytical and investigative mindset with experience in IT audit or security assessment.
• Deep understanding of API security controls and database governance.
• Ability to communicate technical findings to both technical and non‑technical stakeholders.

Required skills

• SQL (analysis, permissions, schema review)
• MySQL, PostgreSQL, SQL Server, Oracle
• API documentation and testing tools – Postman, Swagger/OpenAPI
• Database security controls – roles, grants, auditing
• Logging and monitoring solutions
• Encryption and key management concepts