[EU] Head of Internal Audit EU

Bybit; Town of Vienna (WI); On-site; USD 180,000 - 260,000; Full time

Job summary

Bybit is seeking an accomplished Head of Internal Audit for Bybit EU to set the audit direction, build and lead the EU team, and provide independent assurance to the Board on governance, risk, and controls. The role combines strategic leadership with hands-on critical audit engagements across finance, IT, and operations.

You will interact with regulators and senior leadership, shaping the in‑house function and ensuring alignment with global standards while preserving independence.

Qualifications

• 12–18 years of progressive experience in internal audit, external audit, or risk/controls functions.
• Minimum 5 years in a senior/leadership capacity within regulated financial services, fintech, payments, or digital assets.
• Strong knowledge of Austrian and EU regulatory frameworks — including MiCA, MiFID II, DORA, EMD2, AMLD, GDPR.
• Proven team‑building experience — must have built or significantly scaled an audit function or team in a regulated environment.
• Excellent written and spoken German and English — essential for regulatory engagement, Board reporting, and multi‑jurisdictional coordination.
• Board / Audit Committee reporting experience — comfortable presenting independently to non‑executive directors and regulators.

Responsibilities

• Define and execute the multi-year internal audit strategy for Bybit EU, aligned with the entity's risk profile and business goals.
• Serve as primary audit representative to the Board and Audit Committee, delivering independent assurance and strategic counsel on risks.
• Maintain the Internal Audit Charter, policies, and quality framework per IIA standards and local regulation.
• Build, lead, and develop the EU internal audit team, setting culture, hiring, coaching, and performance management.
• Plan and deliver risk-based audits across finance, operations, IT, cybersecurity, and crypto-specific processes.
• Lead transition to in-house capability, coordinating with co-sourcing partners and managing budgets.
• Prepare and present audit reports with findings, risk ratings, root causes, and remediation plans to regulators and senior management.

Skills

Regulatory knowledge

Leadership

German language

English language

Stakeholder management

Auditing

Data analytics

Regulatory reporting

Education

CIA (Certified Internal Auditor)

CISA

CAMS

CFE

Tools

SQL

Python

AI tools

Job description

About Us

Established in 2018, Bybit is one of the world’s leading cryptocurrency exchanges and digital financial platforms, serving over 80 million users across more than 200 countries and regions. Powered by world-class technology and a user-first mindset, Bybit delivers a seamless ecosystem across trading, payments, wealth management, custody, institutional services, and Web3 — connecting users to the future of digital finance.

Our core values define how we build. We listen, care and improve to create products and experiences that put users first. Backed by a global team of ambitious builders, problem-solvers, and innovators, we foster a high-performance and fast-moving environment where talent is empowered to drive real impact at the global scale. Supported by 24/7 multilingual customer service and a strong commitment to innovation, we are shaping the future of finance through technology, collaboration, and bold execution.

Today, Bybit is recognized as one of the most trusted and transparent platforms in the digital asset industry, continuing to expand its global presence while building the infrastructure for the next generation of financial services.

Role Summary

Lead and own Bybit EU's Internal Audit function as the most senior audit professional in the European entity. You will be responsible for establishing strategic audit direction, building and managing the EU audit team, and providing independent assurance to the Board on the effectiveness of governance, risk management, and internal controls.

This is a strategic leadership role — you will set the audit vision, engage directly with regulators and the Board, and drive the maturation of the audit function from its current state toward a fully scaled in‑house capability. You will also maintain hands‑on involvement in key audit engagements where warranted.

The position reports directly to the Board of Directors of Bybit EU with a dotted reporting line to the Global Head of Internal Audit at Bybit Group, ensuring alignment with group-wide standards while maintaining statutory independence.

Key Responsibilities

Strategic Leadership & Governance

• Define and execute the multi-year internal audit strategy for Bybit EU, aligned with the entity's risk profile, regulatory obligations, and business growth trajectory.
• Serve as the primary audit representative to the Board / Audit Committee, providing independent assurance opinions and strategic counsel on emerging risks.
• Maintain the local Internal Audit Charter, policies, and quality assurance framework in accordance with IIA Standards and local regulatory expectations.
• Build, lead, and develop the EU internal audit team — setting culture, hiring, coaching, and performance management.

Audit Execution & Methodology

• Plan and deliver a risk-based annual audit plan covering finance, operations, compliance, IT, cybersecurity, and business‑specific processes (trading, custody, listing, AML/CFT).
• Align with the Global Internal Audit function on group‑wide methodologies, tooling, and combined assurance approaches while adapting to EU‑specific requirements.
• Lead the transition from outsourced/co‑sourced audit arrangements to a scalable in‑house capability. During the transition period, coordinate closely with co‑sourcing partners — overseeing the quality of their deliverables (both breadth and depth of coverage), managing the relationship, and controlling the audit budget.
• Conduct and supervise detailed audit work — walkthroughs, control testing, data analytics, root cause analysis — ensuring audit depth and quality.
• Prepare and present audit reports with clear findings, risk ratings, root causes, and actionable remediation plans to the Board, senior management, and regulators.

Regulatory & Stakeholder Engagement

• Serve as the primary point of contact for regulatory audit inquiries (FMA, ECB/SSM where applicable) and coordinate regulatory examination support.
• Monitor and anticipate evolving EU regulatory developments (MiCA, MiFID II, DORA, AMLD6, EMD2, GDPR, NIS2) — proactively adjusting audit coverage and methodology.
• Build and maintain strong relationships with external auditors, regulators, and key internal stakeholders across Compliance, Risk, Legal, Finance, Operations, IT, and Product.
• Work closely with 2nd line functions (Compliance, Risk) to deliver an integrated assurance model — ensuring all key regulatory obligations are closely monitored and audited, controls are consistently designed and operating effectively, and gaps are timely escalated with clear action plans to remediate.

Continuous Improvement

• Drive automation and innovation in audit processes — leveraging data analytics, continuous auditing/monitoring, and AI‑enabled techniques.
• Promote a culture of integrity, accountability, and continuous improvement across the EU business.
• Coordinate remediation tracking and follow‑up, ensuring timely closure of audit findings and management actions.

Required Qualifications & Skills

• 12–18 years of progressive experience in internal audit, external audit, or risk/controls functions, with a minimum of 5 years in a senior/leadership capacity within regulated financial services, fintech, payments, or digital assets.
• Strong knowledge of Austrian and EU regulatory frameworks — including MiCA, MiFID II, DORA, EMD2, AMLD, GDPR — with practical experience engaging European regulators (FMA, BaFin, or equivalent).
• Professional certifications required: CIA (Certified Internal Auditor) or equivalent. Additional certifications (CISA, CAMS, CFE, CRISC, ICA) are highly valued.
• Proven team‑building experience — must have built or significantly scaled an audit function or team in a regulated environment.
• Excellent written and spoken German and English — essential for regulatory engagement, Board reporting, and multi‑jurisdictional coordination.
• Board / Audit Committee reporting experience — comfortable presenting independently to non‑executive directors and regulators.
• Genuinely hands‑on — this is not a "sit at the top" role. Must be deeply involved in the details of individual audit projects, understand the substance of findings, and personally drive quality on key engagements.
• Outstanding stakeholder management — experience operating effectively in a global matrix structure with cross‑regional collaboration.
• Strong project and resource management skills — managing multiple concurrent audits, budgets, and external service providers.
• Adaptable, self‑driven, and resilient — comfortable operating in a fast‑paced, evolving environment with shifting priorities and regulatory landscape.
• Knowledge of crypto, DeFi, Web3 ecosystems, and blockchain technology is strongly preferred.

Nice to Have

• Prior experience in a Head of IA or equivalent role at a crypto/fintech entity regulated in the EU.
• Experience with IIA's Three Lines Model implementation and maturity advancement.
• Familiarity with ISAE 3402 / SOC reports, COSO frameworks, and EU outsourcing/ICT risk guidelines (EBA, DORA).
• Track record of building audit functions in scaling/high‑growth organisations.
• Proficiency in data analytics using SQL, Python, and AI tools for audit evidence gathering, continuous monitoring, and fraud detection.

Why Join Us

• Study Growth Fund: We support your professional development and continuous learning.
• Internal Events: Participate in regular team‑building activities, workshops, and events designed to promote collaboration and innovation.
• Global Collaboration: Be part of a diverse, international team, working alongside colleagues from around the world.
• Career Advancement: Access opportunities for growth and advancement within a rapidly expanding global company.
• Internal Mobility: Grow with us- Your long‑term development is important to us. We offer internal job opportunities to help build your career path.