IT Auditor

RedotPay; Hong Kong; On-site; HKD 300,000 - 600,000; Full time

Job summary

RedotPay is seeking an experienced IT Auditor / IT Risk & Compliance Specialist to join our Internal Audit function. The role focuses on evaluating ITGC, ITAC and information security risks within our fintech/crypto ecosystem.

The ideal candidate has 3–5 years of relevant experience, a background in financial services or crypto, and professional certifications such as CISA, CISSP or CRISC. Strong analytical and communication skills are essential in a fast-paced environment.

Qualifications

• 3–5 years of IT Audit/IT Risk/IT Compliance experience.
• In-house and/or consulting experience is preferred.
• Certifications such as CISA/CISSP/CRISC are highly valued.

Responsibilities

• Lead and perform audits of ITGC, ITAC, cyber security, data privacy and system infra.
• Evaluate design and operating effectiveness of IT risk controls.
• Identify gaps and provide practical risk-based remediation advice.
• Ensure technology processes comply with fintech/crypto regulations.
• Coordinate with DevOps, Security, Risk and external auditors for remediation.

Skills

IT audit

Risk assessment

Regulatory compliance

Communication skills

Analytical thinking

Job description

RedotPay is a global crypto payment fintech integrating blockchain solutions into traditional banking and finance infrastructure. Our user‑friendly crypto platform empowers millions globally to spend and send crypto assets, ensuring faster, more accessible, and inclusive financial services. RedotPay advances financial inclusion for the unbanked and supports crypto enthusiasts, driving the global adoption of secure and flexible crypto‑powered financial solutions. Join us in shaping the future of finance and making a meaningful impact on a global scale.

About the Role

We are seeking an experienced IT Auditor / IT Risk & Compliance Specialist with 3–5 years of experience to join our Internal Audit function. This role is responsible for evaluating ITGC, ITAC, and information security risks within our fast‑evolving fintech/crypto ecosystem. Ideally, the candidate will bring a strong technical audit background with hands‑on experience in cloud environments, alongside exposure to DevOps workflows and foundational system architecture concepts.

• IT Audit Execution: Lead and perform comprehensive audits covering IT General Controls (ITGC), IT Application Controls (ITAC), cyber security, data privacy, and system infrastructure.
• Risk Assessment: Evaluate the design and operating effectiveness of IT risk management frameworks and internal controls.
• Gap Analysis & Advisory: Identify technical and process control gaps, providing practical, risk‑based recommendations to mitigate technology and operational risks.
• Compliance Alignment: Ensure technology systems and processes comply with relevant regulatory requirements in the fintech/crypto sector.
• Stakeholder Management: Liaise effectively with DevOps, Security, Risk, and external auditors to drive remediation and continuous improvement.

Requirements

• 3–5 years of solid experience in IT Audit, IT Risk Management, or IT Compliance.
• Prior experience in both in‑house and professional services/consulting environments is highly preferred.
• Experience in financial services, fintech, or the crypto/blockchain industry is a significant plus.
• Professional certifications such as CISA, CISSP, CRISC, or equivalent is highly preferred.
• Strong analytical skills, excellent communication capabilities, and the ability to thrive in a fast‑paced, high‑tech environment.