Internal Controls Lead — Digital Assets & Crypto

Ceffu; Fatih; Hybrid; TRY 600,000 - 900,000; Full time

Job summary

Ceffu is seeking an Internal Control Officer to support the Board in Turkey. You will monitor internal processes, controls, and compliance, and report identified issues to ensure regulatory adherence and operational integrity.

Based in Istanbul with a hybrid work model, you will collaborate with risk, audit, and governance teams to design, test and remediate control deficiencies across custody operations and regulatory requirements for crypto assets.

Qualifications

• Bachelor’s degree and 3–5 years in internal control, internal audit, compliance monitoring or related fields.
• Strong understanding of internal control frameworks and risk-based methodologies.
• Knowledge of SPK, MASAK, AML/CFT legislation and crypto-asset governance.
• Ability to map processes, design controls, test evidence and report issues.

Responsibilities

• Prepare and monitor risk-based internal control plans approved by the Board.
• Test controls across custody operations, onboarding, access rights and reporting.
• Assess control effectiveness address operational, financial, compliance and cybersecurity risks.
• Coordinate with CISO and risk teams, escalate material risks to the Board.
• Maintain governance documentation and support regulatory inspections.

Skills

Internal controls

Regulatory compliance

Risk assessment

Audit reporting

Stakeholder management

Education

Bachelor's degree in accounting, finance, business administration, information systems, or related field

Tools

COBIT

ISO 27001

COSO

Three Lines Model

Job description

Ceffu is seeking an Internal Control Officer to support the Board in Turkey. You will monitor internal processes, controls, and compliance, and report identified issues to ensure regulatory adherence and operational integrity.

Based in Istanbul with a hybrid work model, you will collaborate with risk, audit, and governance teams to design, test and remediate control deficiencies across custody operations and regulatory requirements for crypto assets.