About the Role
You will plan and execute risk-based internal audits aligned with the annual audit plan and applicable Taiwan regulatory requirements. You will assess IT, cybersecurity, technology, operational, and risk-management controls; identify gaps and risks; recommend corrective actions; prepare audit reports; present findings to senior management; and follow up on remediation.
Requirements
•Bachelor's degree or above in Law or Risk Management.
•3–5 years of experience in IT audit, cybersecurity audit, technology risk, information security risk, risk and controls, or risk control in financial services or the virtual asset industry.
•Knowledge of cybersecurity controls, access management, change management, incident management, vulnerability management, cloud security, and risk-management frameworks.
•Fluency in English and Mandarin.
•CIA, CISA, CISM, CRISC, CISSP, ISO 27001 Lead Auditor or Lead Implementer, or another relevant audit or compliance certification.
•Report-writing and communication skills.
Responsibilities
•Develop, plan, and execute risk-based internal audits in line with the annual audit plan.
•Evaluate internal controls across operations, infrastructure, applications, cloud environments, cybersecurity, and information security frameworks.
•Assess the design and operating effectiveness of technology controls.
•Identify and assess technology, operational, cybersecurity, and information security risks.
•Review controls supporting custody, wallets, transactions, APIs, and digital-asset operations.
•Assess technology and operational controls against Taiwan regulatory requirements.
•Support regulatory, compliance, and risk-control audits.
•Identify control gaps, risks, and process improvement opportunities and recommend corrective actions.
•Prepare audit reports and present findings and recommendations to senior management.
•Follow up on audit findings to ensure corrective measures are implemented.
