Custody Audit & Risk Management Specialist

Bitcoin Suisse AG; Abu Dhabi; On-site; AED 150,000 - 210,000; Full time

Job summary

Bitcoin Suisse AG seeks an experienced Audit Management professional to own and coordinate the custody audit program, including ISAE 3402 engagements, and to maintain robust control frameworks around signing keys and cold-storage processes.

You will manage audit requests, document control objectives, and ensure regulatory readiness across ISAE 3402, SOC2, DORA and ISO 27001 standards, collaborating with auditors and internal teams.

Qualifications

• Experience with external and internal audits and standards (ISAE 3402, SOC2, DORA, ISO 27001).
• Understanding of control objectives, control testing, and control frameworks.
• Knowledge of cryptocurrencies, blockchain tech, cryptography, cybersecurity, risk mgmt.
• Experience with digital asset custody (seeds, private keys, wallets, key mgmt, cold storage).
• Degree in Finance / Economics / BIT / CS or related field.
• Certifications in audit, risk, security, or governance are a strong plus.
• Strong stakeholder management with auditors, regulators, and internal teams.
• Excellent analytical skills, meticulous attention to detail, and a self-driven, open-minded personality.
• Excellent language skills in English and optionally German

Responsibilities

• Own and coordinate the custody audit program including ISAE 3402 Type 1 and Type 2 engagements with auditors.
• Prepare and maintain control frameworks including key management ceremonies and signing key controls.
• Manage and respond to audit requests, supporting fieldwork and documentation of controls.
• Champion compliance with ISAE 3402, SOC2, DORA, ISO 27001 and related standards across custody.
• Ensure completeness and currency of business documents and audit evidence for certifications and regulatory examinations.
• Design, implement, monitor operational and system controls related to Custody.
• Participate in risk calls, drive risk initiatives and follow-up actions.
• Provide audit-related insights and ad-hoc analysis to support decision-making.

Skills

Auditing standards

Controls-based assurance

Risk management

Cybersecurity awareness

Stakeholder management

Analytical skills

Attention to detail

English language skills

German language (optional)

Education

Degree in Finance/ Economics/ BIT / CS

Tools

Crypto / blockchain knowledge

Job description

Audit Management amp Certification

Own and coordinate our custody audit program including ISAE 3402 Type 1 and Type 2 engagements and interactions with independent auditors such as PwC Prepare and maintain control frameworks including key management cold-storage signing key generation ceremonies segregation of signing keys and multiparty authorization controls Manage and respond to external and internal audit requests supporting audit fieldwork evidence collection and the documentation of control objectives addressed risks and key controls Champion compliance with ISAE 3402 SOC2 DORA ISO 27001 and related regulatory standards across the custody organization Ensure completeness and currency of business documentation and audit evidence to support certifications and regulatory examinations

Risk Management Controls amp Compliance

Design implement and continuously monitor operational and system controls related to Custody from withdrawal-address whitelisting and 48-hour time-locks to 6-eye key ceremonies and M-of-N approval frameworks Participate in regular risk call updates and coordinate follow-up actions drive risk initiatives and related improvement programs Report operational or system incidents to the Risk function and support incident response and remediation with our infrastructure and software development teams Maintain control evidence to ensure compliance with internal policies regulatory requirements and audits Support decision-making by providing insights in the form of operational or management reports and performing ad-hoc analysis of custody-related data

What you bring along

• Strong experience with external and internal audits and related standards such as ISAE 3402, SOC2, DORA, ISO 27001 and similar, ideally in a financial services environment
• Deep understanding of controls-based assurance, control objectives, control testing, and the design and operation of effective control frameworks
• Solid knowledge about cryptocurrencies, blockchain technologies, cryptography, cybersecurity, risk management, and adversarial thinking
• Experience with digital asset custody, including seeds, private keys, wallets, key management, and cold-storage solutions; being a crypto OG is a plus
• A degree in Finance, Economics, Business Information Technology, Computer Science, or another related subject
• Certifications in audit, risk, security, or governance areas are a strong plus
• Profound stakeholder management skills with a proven ability to partner effectively with auditors, regulators, and internal teams in challenging circumstances
• Excellent analytical skills, meticulous attention to detail, and a self-driven, open-minded personality
• Excellent language skills in English and optionally German