- Develop and execute annual risk-based internal audit plans.
- Conduct operational, financial, compliance, and IT audits across the organization.
- Evaluate the adequacy and effectiveness of internal controls.
- Identify control weaknesses, operational risks, and process improvement opportunities.
- Prepare audit reports with practical recommendations and present findings to senior management.
- Monitor remediation plans and verify the implementation of corrective actions.
- Assess enterprise-wide risk management processes and governance practices.
- Review key business processes to ensure appropriate segregation of duties and control mechanisms.
- Evaluate fraud prevention controls and investigate control deficiencies when necessary.
- Participate in risk assessments for new products, business initiatives, and system implementations.
Compliance & Regulatory Support
- Evaluate compliance with applicable Turkish regulations, including AML/CFT requirements.
- Review the effectiveness of KYC, transaction monitoring, sanctions screening, and suspicious transaction reporting processes.
- Support regulatory inspections and external audits by preparing documentation and coordinating responses.
- Stay informed of regulatory developments affecting digital asset service providers.
Technology & Information Security Audit
- Review IT general controls (ITGC), cybersecurity controls, access management, and data protection practices.
- Assess blockchain-related operational controls, wallet management processes, custody procedures, and smart contract governance where applicable.
- Collaborate with Information Security teams to evaluate system security and operational resilience.
- Recommend improvements to internal policies, SOPs, and control frameworks.
- Promote a strong risk and compliance culture throughout the organization.
- Assist in developing audit methodologies, testing procedures, and audit documentation standards.
Qualifications Required
- Bachelor's degree in Accounting, Finance, Business Administration, Economics, Information Systems, or related fields.
- 3+ years of experience in Internal Audit, Risk Management, Compliance, or External Audit.
- Experience in financial services, fintech, payment institutions, cryptocurrency exchanges, or blockchain companies.
- Strong understanding of internal control frameworks (COSO), risk assessment methodologies, and audit techniques.
- Familiarity with AML/KYC, fraud risk management, and regulatory compliance.
- Excellent analytical, problem-solving, and report-writing skills.
- Strong communication and stakeholder management abilities.
- Fluent in English (written and spoken).
The personal data you share as part of your job application is processed by CoinTR Crypto Asset Trading Platform, acting as the data controller in accordance with the Law No. 6698 on the Protection of Personal Data, solely for the purpose of conducting recruitment processes.