IT Audit Manager
Bybit
Get more replies from employers
Send a job-specific resume in minutes.
Job summary
Bybit is seeking a technically strong IT Audit Manager to execute deep-dive technology audits across its global infrastructure. This hands-on role involves assessing configuration, code, and architecture levels with a multi-jurisdictional scope.
You will report to the Head of IT Audit and partner with Engineering, Security, DevOps, and Product teams. The ideal candidate brings 8+ years of IT audit experience in fintech or crypto, with core expertise in cloud, API security, and SDLC controls.
Qualifications
- Bachelor's degree in Information Systems, Computer Science, Engineering, or related field.
- 8+ years IT audit experience in fintech, crypto, or financial services with strong technical execution.
- Experience working with cross-border teams and stakeholders across jurisdictions.
- Hands-on technical audit capabilities across infrastructure, cloud, APIs, SDLC, and security controls.
- Familiarity with regulatory frameworks across multiple regions is advantageous.
Responsibilities
- Perform hands-on technical IT audits of infrastructure, cloud environments, APIs, SDLC pipelines, network architecture, and wallet/custody systems.
- Coordinate global IT audit programme with cross-border teams and regional stakeholders.
- Develop findings with risk statements, root-cause analysis, and remediation recommendations.
- Prepare audit reports for senior management and the Board Audit Committee.
Skills
Education
Tools
Job description
Established in 2018, Bybit is one of the world’s leading cryptocurrency exchanges and digital financial platforms, serving over 80 million users across more than 200 countries and regions. Powered by world-class technology and a user-first mindset, Bybit delivers a seamless ecosystem across trading, payments, wealth management, custody, institutional services, and Web3 — connecting users to the future of digital finance.
Our core values define how we build. We listen, care and improve to create products and experiences that put users first. Backed by a global team of ambitious builders, problem-solvers, and innovators, we foster a high-performance and fast-moving environment where talent is empowered to drive real impact at the global scale. Supported by 24/7 multilingual customer service and a strong commitment to innovation, we are shaping the future of finance through technology, collaboration, and bold execution.
Today, Bybit is recognized as one of the most trusted and transparent platforms in the digital asset industry, continuing to expand its global presence while building the infrastructure for the next generation of financial services.
We are seeking a technically strong IT Audit Manager to execute deep-dive technology audits across Bybit's global infrastructure. This is a hands-on technical auditor role — you will assess systems and infrastructure at the configuration, code, and architecture level, not just review process documentation. You will operate across cross-border teams and stakeholders, executing a global audit programme that covers centralised technology processes while testing for local regulatory and operational nuances.
Reporting to the Head of IT Audit, the ideal candidate combines strong technical depth with the ability to navigate a multi-jurisdictional, fast-moving digital asset environment.
- Perform hands-on technical audits of IT infrastructure, cloud environments, APIs, SDLC pipelines, network architecture, and wallet/custody systems.
- Conduct configuration reviews, code-level assessments, access control testing, log analysis, and system interface validation.
- Assess architecture design, security controls, and deployment pipelines against industry standards and regulatory expectations.
- Evaluate compliance with technology, cybersecurity, outsourcing, and digital-asset regulations across multiple jurisdictions.
- Execute the global IT audit programme covering centralised processes (cloud infrastructure, network layer, SDLC, API gateway, identity management), adapting scope and testing for jurisdictional differences where applicable.
- Coordinate with cross-border teams and regional stakeholders to understand local regulatory requirements, operational differences, and control variations.
- Conduct technology-risk scanning to identify emerging threats, regulatory changes, and architectural vulnerabilities across Bybit's environment.
- Perform technical walkthroughs with Engineering, Security, DevOps, and Product teams to map system architectures, data flows, and control environments.
- Contribute to the annual risk-based IT audit plan, prioritising coverage based on technical risk exposure and regulatory obligations.
- Develop well-substantiated technical findings with clear risk statements, root-cause analysis, and actionable remediation recommendations.
- Prepare concise audit reports for senior management and the Board Audit Committee.
- Track remediation progress, validate fixes at a technical level, and maintain status reporting.
- Collaborate with global IA colleagues ("One Team") to ensure consistent coverage and knowledge sharing across regions.
- Stay current on emerging technologies, cyber threats, and regulatory developments in cryptocurrency and blockchain.
- Support readiness for regulatory reviews, licensing audits, and independent assessments.
- Bachelor's degree in Information Systems, Computer Science, Engineering, or related field.
- 8+ years of IT audit experience in financial services, fintech, or cryptocurrency exchange environments, with a strong technical execution focus.
- Demonstrated experience working with cross-border teams and managing stakeholder relationships across multiple jurisdictions.
- Core technical experience required:
- IT infrastructure & network architecture (firewalls, segmentation, DNS, load balancing, VPN, zero-trust)
- Cloud platforms (AWS, Tencent Cloud) — architecture review, IAM, security group configuration, logging & monitoring
- API security — authentication, authorisation, rate limiting, input validation, gateway configuration
- SDLC — secure coding practices, CI/CD pipeline controls, code review, container security, change management
- Preferred experience:
- Digital wallet systems & crypto key management (HSM, MPC, multi-sig, cold/warm/hot wallet architecture)
- Web3 technology & blockchain security (smart contract auditing, on-chain monitoring, consensus mechanisms, DeFi protocol risks)
- Familiarity with digital-asset regulatory frameworks (EU MiCA, UAE VARA, Türkiye, Kazakhstan, Georgia, Indonesia, Argentina) is advantageous.
- Ability to read and assess system configurations, infrastructure-as-code, CI/CD pipelines, and API specifications.
- Hands-on experience with cloud security tooling (CloudTrail, GuardDuty, Azure Defender, AWS Config).
- Proficiency in log analysis, network traffic assessment, and security testing tools.
- Experience leveraging AI tools (e.g., Claude, Clawbot) and data analytics to support audit execution is preferred.
- Strong analytical and problem-solving skills; able to translate technical findings into business-relevant risk language.
- Effective communicator across cultures and time zones — comfortable engaging with engineering and product teams globally.
- Self-directed; able to manage multiple concurrent audits independently in a globally distributed environment.
- CISA, CISM, CISSP, or CRISC preferred.
- High integrity, professional skepticism, and attention to detail.
- Proficiency in English and Mandarin Chinese.
- Location: Hong Kong, Abu Dhabi or Malaysia.
At Bybit, we are committed to fostering a supportive and enriching work environment.
- Study Growth Fund: We support your professional development and continuous learning.
- Internal Events: Participate in regular team-building activities, workshops, and events designed to promote collaboration and innovation.
- Global Collaboration: Be part of a diverse, international team, working alongside colleagues from around the world.
- Career Advancement: Access opportunities for growth and advancement within a rapidly expanding global company.
- Internal Mobility: Grow with us- Your long-term development is important to us. We offer internal job opportunities to help build your career path.
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
