Internal Auditor

The role

The Internal Auditor will run the third line of defence for an EU-licensed fintech entity. You will own the risk-based Internal Audit Plan and execute end-to-end engagements across regulatory, AML, and ICT obligations.

What you will do

• Own and maintain the risk-based Internal Audit Plan
• Execute engagements end-to-end including design, sampling, and testing
• Write Board-ready audit reports with findings and recommendations
• Obtain and track remediation plans with named owners and deadlines
• Present findings and remediation status to the Management Board
• Deliver the annual independent AML/CFT audit and the DORA ICT framework audit
• Scope, direct, and challenge external specialists
• Maintain audit evidence for regulatory supervisory reviews

Required qualifications

• 5+ years of internal audit or internal control experience in a regulated financial services entity
• Hands-on audit experience with at least one fintech, payment institution, EMI, crypto exchange or VASP
• Working knowledge of at least two of MiCA, PSD2, AMLD5/6 and DORA
• Strong understanding of AML/KYC/CTF frameworks
• Evidence of independence in practice
• Ability to run an engagement unsupervised
• Sufficient ICT and information security audit literacy to scope a DORA engagement
• Fluent professional English
• Hands-on use of AI tools in audit work
• Right to work and tax residence in the EU/EEA
• Eligibility to be appointed to an internal control function of a licensed entity

Nice to have

• MiCA CASP post-authorisation audit experience
• PSD2 / EMI safeguarding, own funds and scheme-compliance audit experience
• Deep ICT / information security audit capability, including DLT infrastructure, wallet security and key management
• DORA operational resilience, outsourcing and third-party risk audit experience
• Custody and segregation-of-client-assets audit experience
• Travel rule (FATF / EU TFR) audit experience
• Experience with a Baltic or other EU financial supervisor
• Board- or regulator-facing communication experience
• CIA, CISA, ACCA or an EU-recognised internal audit qualification
• Russian or Latvian

About the company

The client is a global fintech company operating at the intersection of crypto and traditional payments. It serves millions of users through a B2C retail platform and B2B infrastructure.