Manager Internal Audit

Skills

About the Role

You will plan and execute risk-based internal audits aligned with the annual audit plan and applicable Taiwan regulatory requirements. You will assess IT, cybersecurity, technology, operational, and risk-management controls; identify gaps and risks; recommend corrective actions; prepare audit reports; present findings to senior management; and follow up on remediation.

Requirements

• Bachelor's degree or above in Law or Risk Management.
• 3–5 years of experience in IT audit, cybersecurity audit, technology risk, information security risk, risk and controls, or risk control in financial services or the virtual asset industry.
• Knowledge of cybersecurity controls, access management, change management, incident management, vulnerability management, cloud security, and risk-management frameworks.
• Fluency in English and Mandarin.
• CIA, CISA, CISM, CRISC, CISSP, ISO 27001 Lead Auditor or Lead Implementer, or another relevant audit or compliance certification.
• Report-writing and communication skills.

Responsibilities

• Develop, plan, and execute risk-based internal audits in line with the annual audit plan.
• Evaluate internal controls across operations, infrastructure, applications, cloud environments, cybersecurity, and information security frameworks.
• Assess the design and operating effectiveness of technology controls.
• Identify and assess technology, operational, cybersecurity, and information security risks.
• Review controls supporting custody, wallets, transactions, APIs, and digital-asset operations.
• Assess technology and operational controls against Taiwan regulatory requirements.
• Support regulatory, compliance, and risk-control audits.
• Identify control gaps, risks, and process improvement opportunities and recommend corrective actions.
• Prepare audit reports and present findings and recommendations to senior management.
• Follow up on audit findings to ensure corrective measures are implemented.