Internal Auditor - Digital Asset / Fintech / Crypto

About the role

We are seeking a highly motivated and detail‑oriented Internal Auditor to join our growing team in Turkey. The role will evaluate and improve governance, risk management and internal controls in line with local and global regulatory requirements for crypto‑asset service providers.

Key responsibilities

• Prepare and execute a risk‑based annual internal audit plan covering all company units, activities and outsourced processes.
• Conduct independent audits across operational, financial and regulatory functions, including compliance with SPK, MASAK and internal policies.
• Audit custody operations, wallet and key‑management governance, transaction flows and business continuity arrangements.
• Perform audit testing of information systems governance, security, access and change management, cloud infrastructure and blockchain platforms.
• Assess the adequacy of internal policies, report findings to the Board and monitor remediation actions.

Required profile

• Bachelor’s degree in accounting, finance, business administration, information systems or a related field.
• Minimum five years of experience in internal audit, information systems audit or regulatory compliance within banking, fintech or crypto‑asset services.
• Valid SPK Information Systems Independent Audit Licence.
• Strong knowledge of internal audit practices, risk management frameworks and MASAK AML/CFT requirements.
• Ability to conduct audits independently while maintaining professional independence.
• Fluent in Turkish and English and based in Istanbul, able to work under a hybrid model.

Required skills

• Information systems audit
• IT governance and access‑change management
• Cloud infrastructure auditing
• Blockchain platform and wallet/key‑management auditing
• API security assessment
• AML/CFT compliance knowledge