Internal Audit Lead — Technology

Leadingnation; Hong Kong; On-site; HKD 1,176,000 - 1,647,000; Full time

Job summary

Bitget is seeking an experienced IT audit leader to set the pillar's audit strategy and plan, overseeing risk-based technology reviews across IT controls, security, and cloud environments.

You will lead, coach, and develop IT auditors, presenting findings to senior management and ensuring independent, high-quality engagements across a fast-growing crypto platform.

Qualifications

• 10+ years in IT audit, information security, or technology risk.
• Experience leading teams or engagements.
• Knowledge of NIST, ISO 27001 or COBIT and cloud platforms.
• Proficient in English and Mandarin.

Responsibilities

• Set audit strategy and annual plan aligned with IIA Standards.
• Lead complex technology engagements end-to-end.
• Cover IT controls and cybersecurity across frameworks and cloud.
• Present findings to Head of Internal Audit and management.
• Coach IT auditors and set technical standards.
• Provide advisory input on technology change while maintaining independence.

Skills

Analytical skills

Report writing

Executive-level communication

Python/SQL scripting

Cloud security (AWS/GCP)

Cybersecurity / IT controls knowledge

Education

CISA / CISSP / CIA certification

Tools

Penetration testing exposure

Job description

About us

Bitget is the world's largest Universal Exchange (UEX), serving over 125 million users and offering access to over 2M crypto tokens, 100+ tokenized stocks, ETFs, commodities, FX, and precious metals such as gold. The ecosystem is committed to helping users trade smarter with its AI agent, which co-pilots trade execution.

Bitget is driving crypto adoption through strategic partnerships with LALIGA and MotoGP. Aligned with its global impact strategy, Bitget has joined hands with UNICEF to support blockchain education for 1.1 million people by 2027. Bitget currently leads in the tokenized TradFi market, providing the industry's lowest fees and highest liquidity across 150 regions worldwide.

What you'll do

• Strategy & plan. Set the pillar's audit strategy and own the risk-based annual technology audit plan, refreshed for emerging risks.
• Deliver. Lead, execute, and quality-review technology engagements end to end in line with IIA Standards, personally leading the most complex or sensitive reviews.
• IT & cyber. Cover IT general controls (access, change, SDLC, operations) and cybersecurity (threat & vulnerability management, penetration testing, monitoring/SOC, incident response) against recognised frameworks.
• Cloud & platform. Cover cloud configuration and security, resilience, business continuity and disaster recovery, and custody/key-management and platform infrastructure.
• Report & influence. Present risk-ranked findings and thematic insight to the Head of Internal Audit, and senior management; agree and track remediation to closure.
• Lead. Lead, coach and develop the pillar's IT auditors, set technical standards, and provide advisory input on technology change without impairing independence.

What you'll need

• 10+ years in IT audit, information security, or technology risk gained at a bank, financial institution, Big 4 firm,or major technology/regulated business — including significant team or engagement leadership.
• A relevant certification: CISA, CISSP, CIA, or equivalent.
• Deep knowledge of cybersecurity and IT-control frameworks (NIST, ISO 27001, COBIT) and cloud environments (AWS/GCP), with the credibility to challenge senior technology management.
• Strong analytical and report-writing skills, and a track record of presenting to executives or audit committees.
• Strong command in both English and Mandarin
• Technical literacy in blockchain and digital-asset infrastructure — wallet and key-management models (hot/cold, multisig/MPC) and smart-contract security — or prior experience auditing a crypto exchange, custodian, or blockchain platform.
• Scripting or data-analytics ability (e.g., Python, SQL), or penetration-testing exposure

Why Bitget?

• Bitget is the world's leading web 3 platform for copy trading and one of the world's largest and most respected exchanges
• We are a global company with staff members from over 50 different countries and regions
• We are growing and looking for world-class ambitious talents to help us continue this journey
• We have a streamlined structure that empowers employees to work efficiently, delivering the best results in a short timeframe
• We offer competitive salaries and benefits
• Blockchain technology and digital assets have the potential to change finance in a way no other technology can - be part of it!