Head of Internal Audit - Remote

Overview

We are a leading financial services institution specializing in digital asset custody and crypto-related services. Renowned for our innovation and resilience, we place strong emphasis on the security and efficiency of our IT infrastructure. To further strengthen our internal control framework, we are seeking a highly skilled and committed Head of Internal Audit to oversee and advance our audit function, with a focus on IT and crypto regulatory compliance.

In Short

• Lead and develop a small internal audit team with a focus on excellence and continuous improvement.
• Design and execute the annual audit plan, prioritizing areas of regulatory and operational significance.
• Act as the central point of contact for all internal and external audit stakeholders.
• Plan and conduct risk-based audits with an emphasis on IT systems, information security, and crypto-related processes.
• Review compliance with regulatory frameworks such as MiCAR, DORA, BAIT, MaRisk, and the KWG.
• Prepare detailed audit reports with actionable recommendations.
• Provide advisory services to business units on regulatory requirements, IT controls, and industry best practices.
• Coordinate and liaise with external auditors and supervisory authorities.
• Support the ongoing enhancement of the internal control system, particularly in cybersecurity.
• Monitor implementation of remediation measures and follow up on audit findings.

Requirements

• University degree in Computer Science, Information Systems, or a related field.
• At least 5 years of experience in auditing financial institutions, preferably with a focus on IT or crypto services.
• Proven knowledge of relevant regulatory frameworks: MiCAR, DORA, BAIT, MaRisk, KWG.
• Solid understanding of blockchain technology and crypto asset services.
• Experience leading small teams and managing cross-functional audits.
• Familiarity with audit standards such as ISO/IEC 27001, BSI IT-Grundschutz, NIST, or COBIT.
• Strong analytical and problem-solving skills.
• Clear and structured communication style with the ability to explain complex technical topics to non-specialists.
• High level of initiative and ability to deliver under pressure.
• Professional demeanor and strong stakeholder management capabilities.

Benefits

• A high-impact role with direct influence on the security, compliance, and resilience of a regulated crypto custodian.
• Attractive compensation package.
• Flexible working hours and hybrid working with not more than 3 days in the office.
• Access to extensive training and development programs.
• A dynamic and innovative environment within a fast-growing industry.