Internal Auditor – Third Line of Defence (MiCA & PSD2)

About the role

We are looking for an Internal Auditor to run the third line of defence for SIA Paybis Europe. The role focuses on auditing compliance controls across MiCA CASP, PSD2, AML/KYC/CTF, ICT and security, and reporting directly to the Management Board.

Key responsibilities

• Own and maintain a risk‑based Internal Audit Plan covering MiCA, PSD2, AML/KYC/CTF, DORA, custody and segregation of client assets.
• Design and execute end‑to‑end audit engagements: sample selection, control testing, severity rating and regulatory impact assessment.
• Prepare Board‑ready audit reports with actionable recommendations and obtain remediation plans with named owners.
• Present findings and remediation status to the Management Board on a quarterly basis and produce the annual Internal Audit Report.
• Deliver the annual independent AML/CFT audit and the DORA ICT framework audit, and follow‑up on outcomes.
• Scope, direct and challenge external specialists for deep technical testing when required.

Required profile

• 5+ years of internal audit or internal control experience in a regulated financial services entity (bank, payment institution, EMI, crypto exchange or VASP).
• Hands‑on audit experience with at least one fintech, payment institution, EMI or crypto exchange.
• Working knowledge of at least two regulatory frameworks such as MiCA, PSD2, AMLD5/6 or DORA and ability to translate obligations into test programmes.
• Proven ability to deliver critical findings to senior management or a Board and defend professional judgement.
• Fluent professional English and right‑to‑work in the EU/EEA.

Required skills

• MiCA CASP and PSD2 regulatory frameworks.
• AML/KYC/CTF audit methodology.
• DORA ICT and information security audit literacy.
• Use of AI tools for audit planning, analysis or reporting.

What we offer

• Formal independence – you report functionally to the Board and own the audit charter.
• Dual MiCA CASP + PSD2 control environment – a unique perimeter to audit in Europe.
• Existing audit function to run, not a blank page.
• Direct access to the CEO and Management Board for impact‑driven findings.
• Bootstrapped, profitable business with no investor pressure.
• Part‑time remote work across the EU/EEA with periodic days in Riga and a budget for external specialists and professional development.
• Equal‑opportunity employer.