Responsibilities:

• Establish an independent internal audit system and annual audit plan.
• Design self-assessment and self-inspection mechanisms covering AML/CFT, information security, asset custody, and trading fairness.
• Conduct routine audits and project-based reviews to evaluate the appropriateness, reasonableness, and effectiveness of the internal control system.
• Review the implementation of customer asset and proprietary asset segregation.
• Audit the virtual asset listing/delisting review mechanism and the effectiveness of unfair trading prevention mechanisms.
• Examine wallet management mechanisms, information system security, and access control management.
• Issue improvement recommendations for audit findings and track remediation progress.
• Conduct at least one information security management audit annually (including penetration testing and vulnerability scanning).
• Ensure that audit personnel do not concurrently serve as AML/CFT compliance officers to maintain audit independence.
• Regularly report audit results to the Board of Directors and the Audit Committee.

Requirements:

• Bachelor's degree or above in Accounting, Auditing, Finance, Information Management, or related fields.
• 4+ years of internal audit experience in the financial or VASP industry.
• Holds one of the following certifications: CIA, CFE, CISA, or an FSC-recognized audit certification.
• Familiar with internal control frameworks (COSO) and risk management principles.
• Data analysis capabilities; proficiency in audit tools to enhance audit efficiency.
• Understanding of virtual asset business characteristics, blockchain technology, and the VASP regulatory framework.
• Bilingual English/Mandarin is required to be able to coordinate with overseas partners and stakeholders.
• Strong independent judgment, logical analysis, and report writing skills.