Enterprise Risk & Audit Manager

BitPay; United States; Remote; USD 120,000 - 190,000; Full time

Benefits offered by this job

Remote work

Generous vacation policy

Professional development reimbursement

Fully covered medical and dental plans

Crypto salary option

Stock option programs

Home office allowance

Job summary

BitPay is seeking an experienced Enterprise Risk & Audit Manager to establish and lead the ERM and internal audit functions for a growing regulated crypto fintech. The role focuses on safeguarding resilience, regulatory compliance, governance, and enabling sustainable growth across digital asset products, payments, and financial services.

The ideal candidate will implement a risk-aware culture, govern risk and audit programs, and report to executive management and the Board.

Qualifications

• 5+ years leading ERM, internal audit, governance or operational risk programs within a regulated financial services environment (crypto preferred).
• Experience with regulated fintechs, digital asset firms, banks, payment institutions, or capital markets.
• Proven program and project management experience leading cross-functional initiatives.
• Experience interacting with regulators and Board committees.
• Experience with payments and money transmission.
• Knowledge of COSO internal control framework and regulatory regimes.
• Strong written and verbal communication.
• Bachelor's degree in Business, Risk Management and Governance or related field.
• Certifications such as CIA, CISA, CAMS, CFE, CRM preferred.

Responsibilities

• Develop, implement, and maintain the firm's Enterprise Risk Management (ERM) framework.
• Lead enterprise-wide risk identification, assessment, monitoring, mitigation, and reporting.
• Oversee enterprise risk register and KRIs.
• Build and lead an independent, risk-based internal audit function.
• Present audit reports and recommendations to senior management and the Board Audit Committee.
• Coordinate with external auditors and regulators.

Skills

Leadership

Strategic thinking

Communication

Risk management

Regulatory liaison

Project management

Education

Bachelor's degree in Business, Risk Management and Governance

Tools

COSO Framework

Regulatory reporting systems

Job description

BitPay is seeking an experienced and strategic Enterprise Risk & Audit Manager to establish, lead, and continuously enhance the enterprise risk management (ERM) and internal audit functions for a rapidly growing regulated crypto fintech. This individual will play a critical role in safeguarding the firm's resilience, ensuring regulatory compliance, strengthening governance, and enabling sustainable growth across digital asset products, payments, and financial services. The successful candidate will be responsible for developing a risk-aware culture, implementing robust governance frameworks, overseeing the enterprise-wide risk management program, and delivering an independent internal audit function that provides assurance to executive management and the Board. This role requires deep expertise in financial services risk management, digital assets, regulatory compliance, operational resilience, and technology-enabled controls.

Responsibilities

Enterprise Risk Management

• Develop, implement, and maintain the firm's Enterprise Risk Management (ERM) framework.
• Define the firm's risk appetite and risk tolerance statements in partnership with executive management and the Board.
• Lead enterprise-wide risk identification, assessment, monitoring, mitigation, and reporting.
• Maintain the enterprise risk register and oversee key risk indicators (KRIs).
• Complete the annual Enterprise Risk Assessment and map identified risks to the integrated internal audit plan.
• Conduct periodic enterprise risk assessments covering strategic risk, operational risk, financial risk, market risk, liquidity risk, counterparty risk, technology and cyber risk, digital asset risk, regulatory and compliance risk, third-party/vendor risk, fraud risk, business continuity and operational resilience, and other enterprise risks as they arise.
• Facilitate risk workshops and challenge business assumptions to ensure effective risk ownership.
• Monitor emerging risks within the crypto and fintech ecosystem.
• Drive Enterprise Risk and Internal Audit Committees with reporting, dashboards, and governance materials. Internal Audit
• Build and lead an independent, risk-based internal audit function.
• Enhance the internal audit plan using a risk-based methodology.
• Partner with stakeholders to execute audits across all business functions, including:
• Finance
• Compliance & Risk
• Cybersecurity
• Evaluate the effectiveness of internal controls using recognized control frameworks.
• Track and report on audit findings through remediation and validation.
• Present audit reports and recommendations to senior management and the Board Audit Committee.
• Coordinate with external auditors and regulators.

Requirements

• At least 5 years leading enterprise risk, internal audit, governance or operational risk programs within a regulated financial services environment, preferably in the crypto industry
• Experience working with regulated fintechs, digital asset firms, banks, payment institutions, or capital markets organizations.
• Demonstrated program and project management experience leading cross-functional initiatives.
• Demonstrated experience interacting with regulators and Board committees.
• Experience with payments and money transmission
• Experience with a fintech environment and global regulatory regimes.
• Strong knowledge pertaining Enterprise Risk Management and COSO internal Control Framework.
• Technical knowledge pertaining to operational risk management, regulatory reporting, financial crime controls, cybersecurity, third party risk management and operational resilience.
• Strategic mindset with the ability to translate complex risks into actionable business decisions.
• Strong written and verbal communication.
• Ability to challenge constructively while maintaining collaborative relationships.
• Bachelor's degree in Business, Risk Management and Governance, Economics, or a related field.
• One or more professional certifications preferred, including:
• Certified Internal Auditor (CIA)
• Certified Information Systems Auditor (CISA)
• Certified Anti-Money Laundering Specialist (CAMS)
• Certified Fraud Examiner (CFE)
• Certified Risk Manager (CRM)

What We Offer

• Collaborate with a team of intelligent, enthusiastic individuals.
• Thrive in a rapidly expanding crypto company with global reach, where your contributions make a tangible impact.
• Work remote with a generous vacation policy, including the opportunity to take a sabbatical and select your own holidays.
• Access to continuous learning and development opportunities, supported by professional development reimbursement.
• Competitive salary package with comprehensive benefits, including fully covered medical and dental plans. We also offer telemedicine, life insurance, disability insurance, vision coverage, 401k, travel assistance, and more.
• Option to receive payment in cryptocurrency, along with a crypto match program.
• Stock option awards available to all employees.
• Home office allowance, reimbursement for internet/cell expenses, complimentary Amazon Prime and Spotify subscriptions.
• BitPay is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.