Internal Auditor

CoinTR; Sarıyer; On-site; TRY 500,000 - 800,000; Full time

Job summary

CoinTR is seeking an experienced internal auditor to shape and execute annual risk-based plans across operations, IT, and compliance. You will assess internal controls, identify gaps, and deliver practical remediation guidance to senior management.

This role also covers AML/KYC, fraud risk, and regulatory considerations within the growing crypto space. You will collaborate with cross-functional teams to strengthen governance and risk management, monitor remediation, and support regulatory

Qualifications

• Bachelor’s degree required in accounting, finance, business, economics, information systems, or related fields.
• Minimum 3+ years in internal audit, risk management, compliance, or external audit.
• Experience in financial services, fintech, crypto, or blockchain is a plus.
• Strong knowledge of internal control frameworks (COSO) and audit techniques.
• Familiarity with AML/KYC, fraud risk, and regulatory compliance.

Responsibilities

• Develop and execute annual risk-based internal audit plans.
• Conduct operational, financial, compliance, and IT audits across the organization.
• Evaluate the adequacy and effectiveness of internal controls.
• Identify control weaknesses, risks, and improvement opportunities.
• Prepare audit reports with actionable recommendations for senior management.
• Monitor remediation plans and verify corrective actions.
• Assess enterprise-wide risk management and governance practices.
• Review key processes for segregation of duties and control mechanisms.
• Evaluate fraud prevention controls and investigate deficiencies.
• Participate in risk assessments for new products and system implementations.

Skills

Internal audit

COSO framework

Risk assessment

Audit reporting

Stakeholder management

Education

Bachelor's degree in Accounting

Bachelor's degree in Finance

Bachelor's degree in related fields

Job description

• Develop and execute annual risk-based internal audit plans.
• Conduct operational, financial, compliance, and IT audits across the organization.
• Evaluate the adequacy and effectiveness of internal controls.
• Identify control weaknesses, operational risks, and process improvement opportunities.
• Prepare audit reports with practical recommendations and present findings to senior management.
• Monitor remediation plans and verify the implementation of corrective actions.
• Assess enterprise-wide risk management processes and governance practices.
• Review key business processes to ensure appropriate segregation of duties and control mechanisms.
• Evaluate fraud prevention controls and investigate control deficiencies when necessary.
• Participate in risk assessments for new products, business initiatives, and system implementations.

Compliance & Regulatory Support

• Evaluate compliance with applicable Turkish regulations, including AML/CFT requirements.
• Review the effectiveness of KYC, transaction monitoring, sanctions screening, and suspicious transaction reporting processes.
• Support regulatory inspections and external audits by preparing documentation and coordinating responses.
• Stay informed of regulatory developments affecting digital asset service providers.

Technology & Information Security Audit

• Review IT general controls (ITGC), cybersecurity controls, access management, and data protection practices.
• Assess blockchain-related operational controls, wallet management processes, custody procedures, and smart contract governance where applicable.
• Collaborate with Information Security teams to evaluate system security and operational resilience.
• Recommend improvements to internal policies, SOPs, and control frameworks.
• Promote a strong risk and compliance culture throughout the organization.
• Assist in developing audit methodologies, testing procedures, and audit documentation standards.

Qualifications Required

• Bachelor's degree in Accounting, Finance, Business Administration, Economics, Information Systems, or related fields.
• 3+ years of experience in Internal Audit, Risk Management, Compliance, or External Audit.
• Experience in financial services, fintech, payment institutions, cryptocurrency exchanges, or blockchain companies.
• Strong understanding of internal control frameworks (COSO), risk assessment methodologies, and audit techniques.
• Familiarity with AML/KYC, fraud risk management, and regulatory compliance.
• Excellent analytical, problem-solving, and report-writing skills.
• Strong communication and stakeholder management abilities.