IT Audit Manager UAE; Hong Kong SAR; Kuala Lumpur, Malaysia

About Us

Established in 2018, Bybit is one of the world’s leading cryptocurrency exchanges and digital financial platforms, serving over 80 million users across more than 200 countries and regions. Powered by world-class technology and a user-first mindset, Bybit delivers a seamless ecosystem across trading, payments, wealth management, custody, institutional services, and Web3 — connecting users to the future of digital finance.

Our core values define how we build. We listen, care and improve to create products and experiences that put users first. Backed by a global team of ambitious builders, problem-solvers, and innovators, we foster a high-performance and fast-moving environment where talent is empowered to drive real impact at the global scale. Supported by 24/7 multilingual customer service and a strong commitment to innovation, we are shaping the future of finance through technology, collaboration, and bold execution.

Today, Bybit is recognized as one of the most trusted and transparent platforms in the digital asset industry, continuing to expand its global presence while building the infrastructure for the next generation of financial services.

We are seeking a technically strong IT Audit Manager to execute deep-dive technology audits across Bybit's global infrastructure. This is a hands-on technical auditor role — you will assess systems and infrastructure at the configuration, code, and architecture level, not just review process documentation. You will operate across cross-border teams and stakeholders, executing a global audit programme that covers centralised technology processes while testing for local regulatory and operational nuances.

Reporting to the Head of IT Audit, the ideal candidate combines strong technical depth with the ability to navigate a multi-jurisdictional, fast-moving digital asset environment.

Perform hands-on technical audits of IT infrastructure, cloud environments, APIs, SDLC pipelines, network architecture, and wallet/custody systems.

Conduct configuration reviews, code-level assessments, access control testing, log analysis, and system interface validation.

Assess architecture design, security controls, and deployment pipelines against industry standards and regulatory expectations.

Evaluate compliance with technology, cybersecurity, outsourcing, and digital-asset regulations across multiple jurisdictions.

Execute the global IT audit programme covering centralised processes (cloud infrastructure, network layer, SDLC, API gateway, identity management), adapting scope and testing for jurisdictional differences where applicable.

Coordinate with cross-border teams and regional stakeholders to understand local regulatory requirements, operational differences, and control variations.

Conduct technology-risk scanning to identify emerging threats, regulatory changes, and architectural vulnerabilities across Bybit's environment.

Perform technical walkthroughs with Engineering, Security, Dev Ops, and Product teams to map system architectures, data flows, and control environments.

Contribute to the annual risk-based IT audit plan, prioritising coverage based on technical risk exposure and regulatory obligations.

Develop well-substantiated technical findings with clear risk statements, root-cause analysis, and actionable remediation recommendations.

Prepare concise audit reports for senior management and the Board Audit Committee.

Track remediation progress, validate fixes at a technical level, and maintain status reporting.

Collaborate with global IA colleagues ("One Team") to ensure consistent coverage and knowledge sharing across regions.

Stay current on emerging technologies, cyber threats, and regulatory developments in cryptocurrency and blockchain.

Support readiness for regulatory reviews, licensing audits, and independent assessments.

Bachelor's degree in Information Systems, Computer Science, Engineering, or related field.

8+ years of IT audit experience in financial services, fintech, or cryptocurrency exchange environments,…