Key Responsibilities
Leadership and Audit Management:
- Preparation for the development of the annual audit plan considering the key risks identified.
- Plan, lead, execute and manage both operation and IT audit engagements, from planning to reporting according to established schedule and quality requirements.
- Provide consulting service for new product/system development and process enhancement without compromising independence.
- Plan and allocate resources to effectively accomplish the work to meet productivity and quality goals as well as adjust the audit plans based on the changing IT controls, risk posture, and/or business priority.
- Discuss and share viewpoint of risk and concern, report the audit results with Parent company.
Risk Assessment and Control Evaluation:
- Conduct comprehensive risk assessments to identify and evaluate risks, control weaknesses, and areas of improvement in the organization's digital asset and blockchain systems.
- Assess the effectiveness of controls related to cybersecurity, data integrity, digital asset custody, and transaction security.
Regulatory Compliance:
- Ensure compliance with relevant regulatory requirements (e.g., SEC, AMLO, GDPR) and industry standards (e.g., ISO, NIST) across IT systems and digital asset processes.
- Provide strategic guidance on maintaining and enhancing compliance in a rapidly evolving regulatory environment.
- Stay up to date with related regulatory requirement, guideline, and best practices.
Advanced Audit Techniques:
- Utilize advanced audit methodologies and data analytics to evaluate complex IT systems, blockchain networks, and cryptocurrency exchanges.
- Identify and assess emerging risks in the cryptocurrency industry, including new cybersecurity threats and technological advancements.
Reporting and Communication:
- Prepare and present detailed audit reports to senior management and the board, highlighting key audit findings, risks, and recommendations.
- Collaborate with cross-functional teams, including IT, risk management, and compliance, to develop and implement action plans to address audit findings and monitor / follow up the committed action plan.
Continuous Improvement:
- Stay abreast of the latest developments in blockchain technology, digital asset security, and IT audit practices.
- Recommend and implement best practices to improve the organization's IT governance, risk management, and control environment.
Qualifications
- Bachelor's degree in Information Technology, Computer Science, Accounting, Finance, or related field. Master's degree is preferred.
- Minimum of 5 years of experience in IT audit, cybersecurity, or risk management, with a significant portion of that experience in the financial services or cryptocurrency industry.
- Extensive knowledge of blockchain technology, digital asset security, and cryptocurrency exchanges is essential.
- Professional certifications such as CISA, CISSP, CISM, CRISC or ISO 27001 Lead auditor are required.
- Ability to apply the related IT standard and good practice e.g. COBIT, ITIL, ISO27001, PCI/DSS, Cyber Security to audit work.
- Strong leadership and project management skills, with the ability to lead complex audit engagements and manage multiple priorities.
- Advanced understanding of IT audit methodologies, cybersecurity frameworks, and regulatory compliance.
- Excellent analytical skills with the ability to identify and evaluate complex IT risks and develop actionable recommendations.
- Superior communication and report-writing skills, with the ability to effectively communicate complex technical issues to senior management.
- Ability to work independently and collaboratively in a high-pressure, fast-paced environment.
Successful candidate will be requested to give your consent to conduct criminal background check. The Company reserves the right to not proceed further step of hiring if you do not give the consent for a criminal background check.
Orbix Holdings gives an important to Privacy Notice for candidates, we'll always treat your data with the utmost care. Please click on the links below to find out more about our Privacy Notice for candidates: https://www.orbixholdings.com/docs/Privacy%20Notice%20for%20Candidate.pdf