Crypto Asset Internal Controls Lead

Ceffu; Fatih; Hybrid; TRY 1,500,000 - 1,900,000; Full time

Job summary

Ceffu is seeking an Internal Control Officer to support and collaborate with the Board in Turkey. This role focuses on monitoring internal processes, controls and compliance, and reporting issues to governance bodies to ensure regulatory adherence and operational integrity.

The position supports risk management and audit functions, ensuring alignment with Turkish regulatory frameworks for crypto-asset service providers.

Qualifications

• Bachelor’s degree from a four-year university in accounting, finance, business administration, information systems, computer engineering or a related field.
• 3–5 years of relevant experience in internal control, internal audit, compliance monitoring, operational risk or information systems control.
• Strong understanding of internal control principles and frameworks, including COSO, the Three Lines Model and risk-based control methodologies.
• Good knowledge of applicable SPK and MASAK requirements, AML/CFT legislation, FATF Recommendations, segregation-of-duties principles and governance requirements applicable to crypto-asset service providers.
• Experience in process mapping, risk assessment, control design, control testing, audit-evidence preparation, issue remediation and governance reporting.
• Familiarity with relevant information systems and control frameworks, such as COBIT and ISO 27001.
• Ability to independently challenge process owners, document findings objectively and communicate effectively with senior stakeholders and governance bodies.
• Strong analytical, stakeholder-management, communication and report-writing skills.
• Highest standards of confidentiality, integrity, professionalism and discretion when handling sensitive information.
• Professional proficiency in Turkish and English.
• Candidates must be based in Istanbul and able to work under the company’s hybrid working model.

Responsibilities

• Prepare and execute risk-based internal control plans approved by the Board member or the Board, and report findings to Senior Management.
• Perform continuous control activities across custody operations, asset safeguarding, reconciliations, transaction flows, onboarding, access rights and incident management.
• Test controls under SPK, MASAK, information systems and governance rules for proper implementation and operation.
• Assess adequacy of controls addressing operational, financial, compliance, technology, cybersecurity and AML/CFT risks.
• Review information systems control evidence with the CISO and Information Systems Specialist while staying independent from control implementation.
• Review MASAK-related process controls including customer due diligence, sanctions and wallet-screening evidence, and escalation of suspicious activity.
• Lead design and implementation of controls for new products, digital assets, blockchain services and process changes.
• Identify control deficiencies, report findings, and track remediation actions to completion.
• Coordinate internal and external control reviews and support regulatory inspections with control evidence and testing files.
• Escalate any issue threatening customer assets or safe operation to the Board member and the Board.
• Maintain the internal control framework, control procedures, matrices and governance documentation in line with Turkish regulations and Ceffu’s framework.

Skills

Internal control

Regulatory compliance

Stakeholder management

Risk assessment

Analytical thinking

Report writing

Education

Bachelor’s degree

Tools

COBIT

ISO 27001

COSO

Job description

Ceffu is seeking an Internal Control Officer to support and collaborate with the Board in Turkey. This role focuses on monitoring internal processes, controls and compliance, and reporting issues to governance bodies to ensure regulatory adherence and operational integrity.

The position supports risk management and audit functions, ensuring alignment with Turkish regulatory frameworks for crypto-asset service providers.