IT Audit Manager - Technical Role in Abu Dhabi

About Bybit

Founded in 2018, Bybit is a globally recognized cryptocurrency exchange and digital financial platform with a user base exceeding 80 million across over 200 countries. The company prides itself on innovative technology and customer-centric approaches, providing comprehensive services across trading, wealth management, custody, institutional offerings, and Web3 integration. With commitment to transparency and strong global operations, Bybit is a key player in the next era of digital finance.

Role Overview

We are seeking a technically adept IT Audit Manager to perform in-depth audits of Bybit's worldwide technical infrastructure. Unlike conventional audit roles, this requires hands-on evaluations of system configuration, code quality, and network architecture. The role involves aligning audit efforts with diverse regional regulations and operational circumstances, working closely with varied global stakeholders, and driving a robust global audit schedule.

Key Responsibilities

• Execute detailed technical audits covering IT infrastructure, cloud services, APIs, software development lifecycle (SDLC), network setups, and crypto custody technology.
• Perform assessments involving system configurations, source code analysis, access permissions, log scrutiny, and validation of system interfaces.
• Review architectural designs and security mechanisms against industry standards and compliance demands.
• Evaluate adherence to multi-jurisdictional regulatory frameworks concerning technology, cybersecurity, outsourcing, and digital assets.
• Deliver a comprehensive global audit program focusing on central technological processes while customizing scopes to fit jurisdictional differences.
• Collaborate with cross-border teams to incorporate local regulatory requirements and operational nuances into audit procedures.
• Conduct ongoing technology risk assessments to identify emerging threats, regulatory developments, and potential vulnerabilities.
• Conduct technical walkthroughs with engineering and security teams to document architectures, data flows, and controls.
• Contribute to annual risk-focused IT audit planning prioritizing high-risk areas and regulatory obligations.
• Produce clear and substantiated audit reports articulating risk impacts, root causes, and pragmatic recommendations for remediation.
• Track and verify remediation actions technically and maintain audit progress communications.
• Engage with global internal audit peers to ensure coordinated coverage and shared insights.
• Stay updated with advances in technology, cybersecurity threats, and regulatory changes related to cryptocurrency and blockchain.
• Support preparations for regulatory inspections, licensing audits, and independent reviews.

Qualifications and Experience

• Bachelor’s degree in Information Systems, Computer Science, Engineering, or related discipline.
• Minimum of 8 years' experience in IT auditing within financial services, fintech, or cryptocurrency exchanges, focusing on technical audit execution.
• Proven ability to collaborate across international teams and manage multi-jurisdictional stakeholder relationships.
• Strong expertise in IT infrastructure and network architecture including firewalls, micro-segmentation, DNS, load balancing, VPNs, and zero-trust frameworks.
• Experience assessing cloud platforms such as AWS and Tencent Cloud, including IAM, security group administration, and monitoring/logging.
• Competency in API security measures including authentication, authorization, rate limiting, input validation, and gateway configurations.
• Knowledge of SDLC practices including secure coding, CI/CD controls, container security, and change management.
• Preferred expertise includes digital wallet technologies, crypto key management (HSM, MPC, multisig wallets), Web3, blockchain security, smart contract review, and DeFi risk analysis.
• Familiarity with digital asset regulations from regions including the EU (MiCA), UAE (VARA), Türkiye, Kazakhstan, Georgia, Indonesia, and Argentina is advantageous.

Technical Skills

• Capability to analyze system configurations, infrastructure-as-code, CI/CD pipelines, and API documentation.
• Hands-on experience with cloud security monitoring tools such as CloudTrail, GuardDuty, Azure Defender, and AWS Config.
• Competence in log analysis, network traffic evaluations, and use of security assessment utilities.
• Experience in employing AI tools and data analytics (e.g., Claude, Clawbot) to aid audit activities is a plus.

Personal Skills

• Excellent analytical and problem-solving abilities, able to translate technical issues into clear business risk contexts.
• Strong communication skills for effectively working across cultural and time zone differences with engineering and product teams.
• Self-driven with ability to independently manage several audits in a globally distributed work environment.

Certifications

Professional certifications such as CISA, CISM, CISSP, or CRISC are preferred.

Additional Requirements

• High ethical standards, professional skepticism, and meticulous attention to detail.
• Fluency in English and Mandarin Chinese.
• Location flexibility within Hong Kong, Abu Dhabi, or Malaysia.

Why Work With Us

• Access to a study growth fund to facilitate ongoing professional development.
• Participation in frequent internal events fostering teamwork and innovation.
• Opportunity to work within a diverse and international global team.
• Prospects for career growth in a rapidly growing international company.
• Support for internal mobility to help chart a progressive career path.