Custody Audit & Risk Management Specialist

Bitcoin Suisse is the Swiss crypto-native pioneer and trusted gateway to crypto asset investing. As the leading crypto financial service provider in Switzerland, we operate across the most relevant crypto exchanges and provide brokerage, custody, staking and other crypto-related services at the forefront of technical innovation. We are as dedicated to our clients as we are passionate about cryptocurrencies and the underlying blockchain technology. We make things happen and have helped to shape the crypto and blockchain ecosystem in Switzerland as a driving force in the development of the ‘Crypto Valley’. Bitcoin Suisse is headquartered in Zug with offices in Copenhagen, Vaduz and Bratislava and targets (ultra-) high-net-worth private individuals and institutional clients.

Custody Audit & Risk Management Specialist

You will have the following responsibilities

Audit Management & Certification: 

• Own and coordinate our custody audit program, including ISAE 3402 (Type 1 and Type 2) engagements and interactions with independent auditors such as PwC 
• Prepare and maintain control frameworks, including key management, cold-storage signing, key generation ceremonies, segregation of signing keys, and multiparty authorization controls 
• Manage and respond to external and internal audit requests, supporting audit fieldwork, evidence collection, and the documentation of control objectives, addressed risks, and key controls 
• Champion compliance with ISAE 3402, SOC2, DORA, ISO 27001 and related regulatory standards across the custody organization 
• Ensure completeness and currency of business documentation and audit evidence to support certifications and regulatory examinations 

Risk Management, Controls & Compliance: 

• Design, implement, and continuously monitor operational and system controls related to Custody, from withdrawal-address whitelisting and 48-hour time-locks to 6-eye key ceremonies and M-of-N approval frameworks 
• Participate in regular risk call updates and coordinate follow-up actions; drive risk initiatives and related improvement programs 
• Report operational or system incidents to the Risk function and support incident response and remediation with our infrastructure and software development teams 
• Maintain control evidence to ensure compliance with internal policies, regulatory requirements, and audits 
• Support decision-making by providing insights in the form of operational or management reports and performing ad-hoc analysis of custody-related data 

What you bring along

• Strong experience with external and internal audits and related standards such as ISAE 3402, SOC2, DORA, ISO 27001 and similar, ideally in a financial services environment 
• Deep understanding of controls-based assurance, control objectives, control testing, and the design and operation of effective control frameworks 
• Solid knowledge about cryptocurrencies, blockchain technologies, cryptography, cybersecurity, risk management, and adversarial thinking 
• Experience with digital asset custody, including seeds, private keys, wallets, key management, and cold-storage solutions; being a crypto OG is a plus 
• A degree in Finance, Economics, Business Information Technology, Computer Science, or another related subject 
• Certifications in audit, risk, security, or governance areas are a strong plus 
• Profound stakeholder management skills with a proven ability to partner effectively with auditors, regulators, and internal teams in challenging circumstances 
• Excellent analytical skills, meticulous attention to detail, and a self-driven, open-minded personality 
• Excellent language skills in English and optionally German 

What we offer

• Expertise: Work with crypto native experts
• Culture: Positive and supportive team culture that relies on common goals, ambitions and values  
• Activities: Regular team events and activities 
• Ownership: High level of autonomy and responsibility 
• Fitness: Multisport Card
• Location: Office location in the new Bratislava downtown (Jurkovičova tepláreň)
• Home Office
• Workation: Enjoy the flexibility of working across designated EU countries, with up to 20 days a year to combine work and travel