Internal Audit Lead — Technology

Bitget Limited; Hong Kong; On-site; HKD 180,000 - 240,000; Full time

Benefits offered by this job

Competitive salary and benefits

Global team with 50+ countries

Structured career growth

Blockchain tech exposure

Job summary

Bitget Limited is seeking an experienced IT Audit Leader to drive risk-focused technology audits in a fast-growing crypto environment. You will oversee IT controls, cybersecurity, and cloud platform reviews while engaging with senior management to drive remediation.

The role requires global stakeholding, Mandarin and English fluency, and hands-on leadership of high-complexity audits. Based in Hong Kong with a strong compliance framework and industry-leading crypto governance.

Qualifications

• 10+ years in IT audit, information security, or technology risk with leadership experience.
• Relevant certifications: CISA, CISSP, CIA or equivalent.
• Deep knowledge of cyber and IT-control frameworks (NIST, ISO 27001, COBIT) and cloud environments (AWS/GCP).
• Strong analytical and report-writing skills with executive presentation experience.
• Fluency in English and Mandarin.
• Technical literacy in blockchain and digital-asset infrastructure; prior crypto exchange/auditing experience is a plus.

Responsibilities

• Set the pillar's audit strategy and lead risk-based technology audit plans.
• Lead complex technology engagements end to end per IIA Standards.
• Oversee IT general controls, cybersecurity, SDLC, and operations controls.
• Assess cloud configuration, resilience, BCP/DR, key management, and platform infrastructure.
• Present findings to Head of Internal Audit and senior management; track remediation.
• Coach and develop IT auditors and set technical standards.

Skills

IT audit leadership

Information security

Technology risk

Engagement leadership

Executive presentation

Education

CISA

CISSP

CIA

Tools

NIST

ISO 27001

COBIT

AWS

GCP

Job description

About us

Bitget is the world's largest Universal Exchange (UEX), serving over 125 million users and offering access to over 2M crypto tokens, 100+ tokenized stocks, ETFs, commodities, FX, and precious metals such as gold. The ecosystem is committed to helping users trade smarter with its AI agent, which co-pilots trade execution.

Bitget is driving crypto adoption through strategic partnerships with LALIGA and MotoGP™. Aligned with its global impact strategy, Bitget has joined hands with UNICEF to support blockchain education for 1.1 million people by 2027. Bitget currently leads in the tokenized TradFi market, providing the industry's lowest fees and highest liquidity across 150 regions worldwide.

What you'll do

• Strategy & plan. Set the pillar's audit strategy and own the risk-based annual technology audit plan, refreshed for emerging risks.
• Deliver. Lead, execute, and quality-review technology engagements end to end in line with IIA Standards, personally leading the most complex or sensitive reviews.
• IT & cyber. Cover IT general controls (access, change, SDLC, operations) and cybersecurity (threat & vulnerability management, penetration testing, monitoring/SOC, incident response) against recognised frameworks.
• Cloud & platform. Cover cloud configuration and security, resilience, business continuity and disaster recovery, and custody/key-management and platform infrastructure.
• Report & influence. Present risk-ranked findings and thematic insight to the Head of Internal Audit, and senior management; agree and track remediation to closure.
• Lead. Lead, coach and develop the pillar's IT auditors, set technical standards, and provide advisory input on technology change without impairing independence.

What you'll need

• 10+ years in IT audit, information security, or technology risk gained at a bank, financial institution, Big 4 firm,or major technology/regulated business — including significant team or engagement leadership.
• A relevant certification: CISA, CISSP, CIA, or equivalent.
• Deep knowledge of cybersecurity and IT-control frameworks (NIST, ISO 27001, COBIT) and cloud environments (AWS/GCP), with the credibility to challenge senior technology management.
• Strong analytical and report-writing skills, and a track record of presenting to executives or audit committees.
• Strong command in both English and Mandarin
• Technical literacy in blockchain and digital-asset infrastructure — wallet and key-management models (hot/cold, multisig/MPC) and smart-contract security — or prior experience auditing a crypto exchange, custodian, or blockchain platform.
• Scripting or data-analytics ability (e.g., Python, SQL), or penetration-testing exposure

Why Bitget?

• Bitget is the world's leading web 3 platform for copy trading and one of the world's largest and most respected exchanges
• We are a global company with staff members from over 50 different countries and regions
• We are growing and looking for world-class ambitious talents to help us continue this journey
• We have a streamlined structure that empowers employees to work efficiently, delivering the best results in a short timeframe
• We offer competitive salaries and benefits
• Blockchain technology and digital assets have the potential to change finance in a way no other technology can - be part of it!

For more information regarding candidates' personal data processing, please refer to Bitget Candidate Privacy Notice.