Hybrid Internal Auditor: Regulatory Compliance & Risk

bunq; Amsterdam; Hybrid; EUR 90,000 - 120,000; Full time

Benefits offered by this job

Hybrid schedule

Digital Nomad Program

Travel budget

Learning budget

MacBook

Lunches

Pension plan

Alleo allowance

Friday drinks

Job summary

bunq is seeking an Internal Auditor - Regulatory Compliance in Amsterdam to safeguard our regulatory standing across markets. You will design and execute cross-domain audits ( AML/KYC, data protection, market conduct ) and drive remediation with business teams to close gaps.

You’ll build an audit roadmap, assess high-risk regulatory areas, and evaluate the impact of regulatory changes on operational readiness, ensuring we stay audit-ready and compliant before enforcement deadlines.

Qualifications

• Experience auditing AML/KYC, data protection (GDPR/similar), or market conduct in financial services/fintech.
• Audit methodology: risk-based planning, workpaper development, sampling, presenting findings to executives/regulators.
• Regulatory knowledge: understand banking regulators, interpret guidance, navigate inquiries/examinations.
• Excellent communication: translate regulations into actions for business teams; credible with regulators and leadership.
• Fluency in English (multilingual a plus).

Responsibilities

• Design and execute the first multi-domain compliance audit program across AML/KYC, data protection, market conduct, and operational risk with remediation roadmap.
• Conduct deep-dive audits of high-risk regulatory areas, identify gaps, and build remediation plans.
• Analyze regulatory changes across markets and assess operational readiness to ensure compliance before enforcement deadlines.

Job description

bunq is seeking an Internal Auditor - Regulatory Compliance in Amsterdam to safeguard our regulatory standing across markets. You will design and execute cross-domain audits ( AML/KYC, data protection, market conduct ) and drive remediation with business teams to close gaps.

You’ll build an audit roadmap, assess high-risk regulatory areas, and evaluate the impact of regulatory changes on operational readiness, ensuring we stay audit-ready and compliant before enforcement deadlines.