Senior Associate, Internal Audit

P2P; Hong Kong; On-site; HKD 400,000 - 550,000; Full time

Benefits offered by this job

Comprehensive benefits package

Annual performance bonus

MPF employer contributions

Job summary

P2P in Hong Kong is seeking a Senior Associate for their Internal Audit team. This role involves executing IT audit engagements, assessing technology risks, and working in a dynamic digital asset environment.

The ideal candidate has 2–3 years of audit experience in a financial services or fintech environment and a relevant bachelor's degree. Opportunities for professional growth in a leading digital asset platform are offered.

Qualifications

• 2–3 years of audit experience focusing on Technology or IT.
• Experience in financial services or regulated technology environment preferred.
• Strong written and verbal communication skills in English.

Responsibilities

• Plan and execute Technology and IT audit engagements.
• Conduct risk-based assessments of technology infrastructure.
• Document audit scope and findings clearly.

Skills

Technology Audit Experience

IT General Controls

Cybersecurity Knowledge

Data Management Processes

Communication Skills

Education

Bachelor's degree in Computer Science / IT / Accounting / Finance

Professional qualification: CISA, CISSP, CIA, CPA, ACCA, HKICPA

Tools

Data analytics tools (Python, SQL)

Cloud platforms (AWS, GCP, Azure)

Job description

About Bullish

Bullish is an institutionally focused global digital asset platform that provides market infrastructure and information services. These include:

• Bullish Exchange – a regulated and institutionally focused digital assets spot and derivatives exchange, integrating a high-performance central limit order book matching engine with automated market making to provide deep and predictable liquidity. Bullish Exchange is regulated in Germany, Hong Kong, and Gibraltar.
• CoinDesk Indices – a collection of tradable proprietary and single-asset benchmarks and indices that track the performance of digital assets for global institutions in the digital assets and traditional finance industries.
• CoinDesk Data – a broad suite of digital assets market data and analytics, providing real-time insights into prices, trends, and market dynamics.
• CoinDesk Insights – a digital asset media and events provider and operator of Coindesk.com, a digital media platform that covers news and insights about digital assets, the underlying markets, policy, and blockchain technology.

Reports to:

Head of Internal Audit

The Team / The Role

Bullish’s Internal Audit team in Hong Kong provides independent assurance across the business, covering financial, operational, and technology control environments. As a fast-growing, globally regulated digital asset exchange, Bullish relies on robust technology and IT controls to underpin its platforms, data infrastructure, and regulatory compliance frameworks. The Senior Associate, Internal Audit will be a specialist contributor within the Hong Kong team, reporting to the Head of Internal Audit, with primary responsibility for Technology & IT audit work. This is an excellent opportunity for a technology audit professional looking to deepen their expertise in a dynamic digital asset environment.

Role & Responsibilities

Internal Audit

• Plan and execute Technology and IT audit engagements covering IT general controls (access management, change management, IT operations, and SDLC), application controls, and cybersecurity.
• Conduct risk-based assessments of Bullish’s technology infrastructure, cloud environments, trading platforms, and data management processes.
• Document audit scope, test procedures, findings, and recommendations clearly in workpapers in accordance with Internal Audit methodology.
• Identify IT control deficiencies, assess risk impact, and engage with technology stakeholders to agree practical remediation plans.
• Support integrated audits by providing technology-focused assurance alongside financial and operational audit colleagues.
• Maintain current knowledge of technology risk and cybersecurity frameworks (e.g., ITIL, COBIT, NIST, ISO 27001) and their application in a digital asset context.
• Assist the Head of Internal Audit in annual risk assessment, audit planning, and reporting to senior management and the Audit Committee.
• Liaise with the business to ensure issues are timely and practically remediated.
• Partner with the business to identify areas for improvement and optimization.

SOX

• Conduct testing to evaluate the design and operating effectiveness of internal controls over financial reporting in support SOX 404(a) management testing.
• Track, monitor, and validate the remediation of control gaps/issues identified through testing.

Experience & Qualifications

• 2–3 years of audit experience (internal or external), with a focus on Technology, IT, or Information Systems, and some exposure to leading engagements preferred.
• Experience in financial services, fintech, digital assets (including custody infrastructure and operations), or a regulated technology environment strongly preferred.
• Bachelor’s degree in related discipline (Computer Science / Information Technology / Accounting / Finance etc.)
• Professional qualification in progress or completed: CISA or CISSP are strongly preferred; CIA, CPA, ACCA, or HKICPA also valued.
• Working knowledge of IT general controls frameworks and relevant standards (ITIL, COBIT, NIST CSF, ISO 27001, SOC 2). Familiarity with cloud platforms (AWS, GCP, or Azure) and associated control considerations.
• Strong written and verbal communication skills in English.
• Exposure to LLM-based tools and AI-assisted processes, and interest in how these intersect with audit and risk.
• Self-starter comfortable getting hands-on with building agentic AI solutions using LLM tools to enhance audit processes (e.g., automating control testing, evidence gathering, or RCM maintenance).

Bonus

• Experience with data analytics tools (e.g. Python, SQL, ACL/IDEA) to support audit testing.
• Familiarity with cryptocurrency, blockchain technology, smart contracts, or digital asset markets.
• Total compensation includes base salary, annual performance bonus, MPF employer contributions, and a comprehensive benefits package.

Equal Opportunity Statement

Bullish is proud to be an equal opportunity employer. We are fast evolving and striving towards being a globally-diverse community. With integrity at our core, our success is driven by a talented team of individuals and the different perspectives they are encouraged to bring to work every day.