Senior Associate, Internal Audit
About Bullish
Bullish is an institutionally focused global digital asset platform that provides market infrastructure and information services. These include:BullishExchange - a regulated and institutionally focused digital assets spot and derivatives exchange, integrating a high-performance central limit order book matching engine with automated market making to provide deep and predictable liquidity. Bullish Exchange is regulated in Germany, Hong Kong, and Gibraltar.CoinDeskIndices - a collection of tradable proprietary and single-asset benchmarks and indices that track the performance of digital assets for global institutions in the digital assets and traditional finance industries.CoinDeskData - a broad suite of digital assets market data and analytics, providing real-time insights into prices, trends, and market dynamics.CoinDeskInsights - a digital asset media and events provider and operator ofCoindesk.com, a digital media platform that covers news and insights about digital assets, the underlying markets, policy, and blockchain technology.
Reports to:
Head of Internal AuditThe Team / The Role
Bullish’s Internal Audit team in Hong Kong provides independent assurance across the business, covering financial, operational, and technology control environments. As a fast-growing, globally regulated digital asset exchange, Bullish relies on robust technology and IT controls to underpin its platforms, data infrastructure, and
regulatory compliance frameworks. The Senior Associate, Internal Audit will be a specialist contributor within the Hong Kong team, reporting to the Head of Internal Audit, with primary responsibility for Technology & IT audit work. This is an excellent opportunity for a technology audit professional looking to deepen their expertise in a dynamic digital asset environment.
Role & Responsibilities
Internal Audit
Plan and execute Technology and IT audit engagements covering IT general controls (access management, change management, IT operations, and SDLC), application controls, and cybersecurity.
Conduct risk-based assessments of Bullish’s technology infrastructure, cloud environments, trading platforms, and data management processes.
Document audit scope, test procedures, findings, and recommendations clearly in workpapers in accordance with Internal Audit methodology.
Identify IT control deficiencies, assess risk impact, and engage with technology stakeholders to agree practical remediation plans.
Support integrated audits by providing technology-focused assurance alongside financial and operational audit colleagues.
Maintain current knowledge of technology risk and cybersecurity frameworks (e.g., ITIL, COBIT, NIST, ISO 27001) and their application in a digital asset context.
Assist the Head of Internal Audit in annual risk assessment, audit planning, and reporting to senior management and the Audit Committee.
Liaise with the business to ensure issues are timely and practically remediated
Partner with the business to identify areas for improvement and optimization
SOX
Conduct testing to evaluate the design and operating effectiveness of internal controls over financial reporting in support SOX 404(a) management testing
Track, monitor, and validate the remediation of control gaps/issues identified through testing
Experience & Qualifications
2-3 years of audit experience (internal or external), with a focus on Technology, IT, or Information Systems, and some exposure to leading engagements preferred.
Experience in financial services, fintech, digital assets (including custody infrastructure and operations), or a regulated technology environment strongly preferred.
Bachelor’s degree in related discipline (Computer Science / Information Technology / Accounting / Finance etc.)
Professional qualification in progress or completed: CISA or CISSP are strongly preferred; CIA, CPA, ACCA, or HKICPA also valued.
Working knowledge of IT general controls frameworks and relevant standards (ITIL, COBIT, NIST CSF, ISO 27001, SOC 2). Familiarity with cloud platforms (AWS, GCP, or Azure) and associated control considerations.
Strong written and verbal communication skills in English
Exposure to LLM-based tools and AI-assisted processes, and interest in how these intersect with audit and risk.
Self-starter comfortable getting hands-on with building agentic AI solutions using LLM tools to enhance audit processes (e.g., automating control testing, evidence gathering, or RCM maintenance).
Bonus
Experience with data analytics tools (e.g. Python, SQL, ACL/IDEA) to support audit testing.
Familiarity with cryptocurrency, blockchain technology, smart contracts, or digital asset markets.
Total compensation includes base salary, annual performance bonus, MPF employer contributions, and a comprehensive benefits package.
Bullish is proud to be an equal opportunity employer. We are fast evolving and striving towards being a globally-diverse community. With integrity at our core, our success is driven by a talented team of individuals and the different perspectives they are encouraged to bring to work every day.