Bybit is hiring a IT Audit Manager in CEO Office — Abu Dhabi, UAE; Hong Kong SAR; Kuala Lumpur, Malaysia. The overview below is synthesized from the employer posting on job-boards.eu.greenhouse.io: factual requirements and scope are preserved, but prose is rewritten with editorial context. Verify details and apply via the employer link.
About Us
Company context from the listing:
Established in 2018, Bybit is one of the world’s leading cryptocurrency exchanges and digital financial platforms, serving over 80 million users across more than 200 countries and regions. Powered by world-class technology and a user-first mindset, Bybit delivers a seamless ecosystem across trading, payments, wealth management, custody, institutional services, and Web3 — connecting users to the future of digital finance.
Our core values define how we build. We listen, care and improve to create products and experiences that put users first.
Today, Bybit is recognized as one of the most trusted and transparent platforms in the digital asset industry, continuing to expand its global presence while building the infrastructure for the next generation of financial services.
The listing frames the IT Audit Manager at Bybit as a hands-on product role. This is a hands-on technical auditor role — you will assess systems and infrastructure at the configuration, code, and architecture level, not just review process documentation. You will operate across cross-border teams and stakeholders, executing a global audit programme that covers centralised technology processes while testing for local regulatory and operational nuances.
Reporting to the Head of IT Audit, the ideal candidate combines strong technical depth with the ability to navigate a multi-jurisdictional, fast-moving digital asset environment.
Responsibilities
Day-to-day scope for the IT Audit Manager as described in the posting:
1. Technical Audit Execution
- Perform hands-on technical audits of IT infrastructure, cloud environments, APIs, SDLC pipelines, network architecture, and wallet/custody systems.
- Conduct configuration reviews, code-level assessments, access control testing, log analysis, and system interface validation.
- Assess architecture design, security controls, and deployment pipelines against industry standards and regulatory expectations.
- Evaluate compliance with technology, cybersecurity, outsourcing, and digital-asset regulations across multiple jurisdictions.
2. Global Audit Programme Delivery
- Execute the global IT audit programme covering centralised processes (cloud infrastructure, network layer, SDLC, API gateway, identity management), adapting scope and testing for jurisdictional differences where applicable.
- Coordinate with cross-border teams and regional stakeholders to understand local regulatory requirements, operational differences, and control variations.
3. Audit Planning & Risk Assessment
- Conduct technology-risk scanning to identify emerging threats, regulatory changes, and architectural vulnerabilities across Bybit's environment.
- Perform technical walkthroughs with Engineering, Security, DevOps, and Product teams to map system architectures, data flows, and control environments.
- Contribute to the annual risk-based IT audit plan, prioritising coverage based on technical risk exposure and regulatory obligations.
4. Reporting & Remediation
- Develop well-substantiated technical findings with clear risk statements, root-cause analysis, and actionable remediation recommendations.
- Prepare concise audit reports for senior management and the Board Audit Committee.
- Track remediation progress, validate fixes at a technical level, and maintain status reporting.
5. Collaboration & Industry Awareness
- Collaborate with global IA colleagues ("One Team") to ensure consistent coverage and knowledge sharing across regions.
- Stay current on emerging technologies, cyber threats, and regulatory developments in cryptocurrency and blockchain.
- Support readiness for regulatory reviews, licensing audits, and independent assessments.
Requirements
Experience and skills the team lists as required:
Qualifications & Experience
Experience and skills the team lists as required:
- Bachelor's degree in Information Systems, Computer Science, Engineering, or related field.
- 8+ years of IT audit experience in financial services, fintech, or cryptocurrency exchange environments, with a strong technical execution focus.
- Demonstrated experience working with cross-border teams and managing stakeholder relationships across multiple jurisdictions.
- Core technical experience required:
IT infrastructure & network architecture (firewalls, segmentation, DNS, load balancing, VPN, zero-trust)
Cloud platforms (AWS, Tencent Cloud) — architecture review, IAM, security group configuration, logging & monitoring
API security — authentication, authorisation, rate limiting, input validation, gateway configuration
SDLC — secure coding practices, CI/CD pipeline controls, code review, container security, change management
- Preferred experience:
Digital wallet systems & crypto key management (HSM, MPC, multi-sig, cold/warm/hot wallet architecture)
Web3 technology & blockchain security (smart contract auditing, on-chain monitoring, consensus mechanisms, DeFi protocol risks)
- Familiarity with digital-asset regulatory frameworks (EU MiCA, UAE VARA, Türkiye, Kazakhstan, Georgia, Indonesia, Argentina) is advantageous.
Technical Skills
Experience and skills the team lists as required:
- Ability to read and assess system configurations, infrastructure-as-code, CI/CD pipelines, and API specifications.
- Hands-on experience with cloud security tooling (CloudTrail, GuardDuty, Azure Defender, AWS Config).
- Proficiency in log analysis, network traffic assessment, and security testing tools.
- Experience leveraging AI tools (e.g., Claude, Clawbot) and data analytics to support audit execution is preferred.
Soft Skills
Experience and skills the team lists as required:
- Strong analytical and problem-solving skills; able to translate technical findings into business-relevant risk language.
- Effective communicator across cultures and time zones — comfortable engaging with engineering and product teams globally.
- Self-directed; able to manage multiple concurrent audits independently in a globally distributed environment.
Certifications
- CISA, CISM, CISSP, or CRISC preferred.
Other Requirements
Experience and skills the team lists as required:
- High integrity, professional skepticism, and attention to detail.
- Proficiency in English and Mandarin Chinese.
-
Location
Hong Kong, Abu Dhabi or Malaysia.
Why Join Us
What the posting highlights about the offer:
At Bybit, we are committed to fostering a supportive and enriching work environment.
Our benefits include:
- Study Growth Fund: We support your professional development and continuous learning.
- Internal Events: Participate in regular team-building activities, workshops, and events designed to promote collaboration and innovation.
- Global Collaboration: Be part of a diverse, international team, working alongside colleagues from around the world.
- Career Advancement: Access opportunities for growth and advancement within a rapidly expanding global company.
- Internal Mobility: Grow with us- Your long-term development is important to us. We offer internal job opportunities to help build your career path.