Custody Audit & Risk Management Specialist

Náplň práce, právomoci a zodpovednosti

You will have the following responsibilities

Audit Management & Certification

• Own and coordinate our custody audit program, including ISAE 3402 (Type 1 and Type 2) engagements and interactions with independent auditors
• Prepare and maintain control frameworks, including key management, cold-storage signing, key generation ceremonies, segregation of signing keys, and multiparty authorization controls
• Manage and respond to external and internal audit requests, supporting audit fieldwork, evidence collection, and the documentation of control objectives, addressed risks, and key controls
• Champion compliance with ISAE 3402, SOC2, DORA, ISO 27001 and related regulatory standards across the custody organization
• Ensure completeness and currency of business documentation and audit evidence to support certifications and regulatory examinations

Risk Management, Controls & Compliance

• Design, implement, and continuously monitor operational and system controls related to Custody, from withdrawal-address whitelisting and 48-hour time-locks to 6-eye key ceremonies and M-of-N approval frameworks
• Participate in regular risk call updates and coordinate follow-up actions; drive risk initiatives and related improvement programs
• Report operational or system incidents to the Risk function and support incident response and remediation with our infrastructure and software development teams
• Maintain control evidence to ensure compliance with internal policies, regulatory requirements, and audits
• Support decision-making by providing insights in the form of operational or management reports and performing ad-hoc analysis of custody-related data

Požiadavky na zamestnanca

• Strong experience with external and internal audits and related standards such as ISAE 3402, SOC2, DORA, ISO 27001 and similar, ideally in a financial services environment
• Deep understanding of controls-based assurance, control objectives, control testing, and the design and operation of effective control frameworks
• Solid knowledge about cryptocurrencies, blockchain technologies, cryptography, cybersecurity, risk management, and adversarial thinking
• Experience with digital asset custody, including seeds, private keys, wallets, key management, and cold-storage solutions; being a crypto OG is a plus
• A degree in Finance, Economics, Business Information Technology, Computer Science, or another related subject