Senior Internal Auditor: Risk, Compliance & IT Controls

CoinTR

Fatih

On-site

TRY 240,000 - 360,000

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

CoinTR is seeking an experienced Internal Auditor to develop risk-based annual audit plans and conduct audits across operations, finance, compliance, and IT. You will evaluate controls, identify weaknesses, and present practical recommendations to senior management, while monitoring remediation and supporting regulatory compliance for Turkish regulations, AML/KYC, and fintech industry standards.

A Bachelor's degree and 3+ years in internal audit or risk roles; fluency in English; experience in

Qualifications

Bachelor's degree in Accounting, Finance, Business Administration, Economics, Information Systems, or related fields.
3+ years of experience in Internal Audit, Risk Management, Compliance, or External Audit.
Experience in financial services, fintech, payment institutions, cryptocurrency exchanges, or blockchain companies.

Responsibilities

Develop and execute annual risk-based internal audit plans.
Conduct operational, financial, compliance, and IT audits across the organization.
Evaluate the adequacy and effectiveness of internal controls.
Identify control weaknesses, operational risks, and process improvement opportunities.
Prepare audit reports with practical recommendations and present findings to senior management.
Monitor remediation plans and verify the implementation of corrective actions.
Assess enterprise-wide risk management processes and governance practices.
Review key business processes to ensure appropriate segregation of duties and control mechanisms.
Evaluate fraud prevention controls and investigate control deficiencies when necessary.
Participate in risk assessments for new products, business initiatives, and system implementations.
Evaluate compliance with applicable Turkish regulations, including AML/CFT requirements.
Review the effectiveness of KYC, transaction monitoring, sanctions screening, and suspicious transaction reporting processes.
Support regulatory inspections and external audits by preparing documentation and coordinating responses.
Stay informed of regulatory developments affecting digital asset service providers.
Review IT general controls (ITGC), cybersecurity controls, access management, and data protection practices.
Assess blockchain-related operational controls, wallet management processes, custody procedures, and smart contract governance where applicable.
Collaborate with Information Security teams to evaluate system security and operational resilience.
Recommend improvements to internal policies, SOPs, and control frameworks.
Promote a strong risk and compliance culture throughout the organization.
Assist in developing audit methodologies, testing procedures, and audit documentation standards.