3 дня назад
Internal Auditor (Fintech)
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
Internal Auditor (Fintech): Running the third line of defence for a regulated MiCA CASP and PSD2 payment institution, with an accent on risk-based audit planning, AML/CFT controls, DORA, safeguarding, outsourcing, and governance. Focus on executing end-to-end engagements, challenging control owners and specialists, and delivering evidence-based findings to the Management Board and regulator.
Location: Remote across the EU/EEA with periodic days in Riga, Latvia. Part-time role requiring the right to work and tax residence in the EU/EEA.
Company
is a regulated, profitable crypto and fintech business operating a MiCA CASP- and PSD2-licensed platform for EU customers and B2B financial technology partners.
What you will do
- Own and maintain the risk-based Internal Audit Plan across MiCA CASP, PSD2, AML/KYC/CTF, DORA, custody, safeguarding, outsourcing, governance, and financial controls.
- Execute audits end-to-end, including scoping, programme design, sampling, control testing, severity ratings, and regulatory impact assessment.
- Prepare Board-ready reports with actionable findings and recommendations.
- Obtain remediation plans, track owners and deadlines, and verify closure using documented evidence.
- Present findings and remediation status to the Management Board through quarterly updates and the annual Internal Audit Report.
- Deliver the annual independent AML/CFT and DORA ICT audits and maintain evidence for Latvijas Banka supervisory reviews.
Requirements
- 5+ years of internal audit or internal control experience in a regulated financial services entity; unregulated-only experience is not sufficient.
- Hands-on audit experience in fintech, payments, EMI, crypto exchange, VASP, banking, insurance, or investment services.
- Working knowledge of at least two of MiCA, PSD2, AMLD5/6, and DORA, with the ability to convert regulatory obligations into test programmes.
- Strong AML/KYC/CTF audit knowledge and demonstrated independence when presenting critical findings to senior management or a Board.
- ICT and information security audit literacy sufficient to scope DORA work and challenge external technical specialists.
- Fluent professional English and the right to work and maintain tax residence in the EU/EEA are required.
Nice to have
- MiCA CASP, PSD2/EMI safeguarding, DORA, outsourcing, custody, client-asset segregation, or Travel Rule audit experience.
- Experience with DLT infrastructure, wallet security, key management, or information security audits.
- Experience with Latvijas Banka or another Baltic supervisor.
- CIA, CISA, ACCA, or an EU-recognised internal audit qualification.
- Russian or Latvian language skills.
Culture & Benefits
- Functional reporting to the Management Board with written independence and ownership of the Internal Audit Charter and audit file.
- Opportunity to audit a dual MiCA CASP and PSD2 control environment.
- Existing Board-approved Charter, Audit Universe, Internal Audit Plan, and findings register.
- Part-time remote work across the EU/EEA with periodic days in Riga.
- Budget for external specialists and professional development.
Hiring process
- 30-minute HR screening covering experience, eligibility, independence, and motivation.
- Technical interview with the Global Chief of Compliance, followed by an interview with the CEO.
- References and eligibility check.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →