Job Summary

The Internal Audit Manager, Digital Assets Technology is responsible for providing independent and objective assurance over the Group's Digital Assets technology and integrated business audits. This role is accountable for end-to-end internal audit coverage, including audit planning, risk assessment, audit execution, reporting and continuous business monitoring of digital asset products, platforms, governance and risk management frameworks. Leading and executing IT audits of applications supporting the digital assets business.

The role ensures that digital asset activities are conducted within Group's risk appetite, in compliance with regulatory expectations, and in line with internal policies. The role works closely with other Group Internal Audit teams and key stakeholders across the business, risk, technology and compliance functions to deliver a coordinated and integrated audit approach, and to provide senior management and the Board with clear insight into digital assets risks, control effectiveness and emerging issues

Responsibilities

• \tDevelop and maintain a risk-based audit plan for digital assets technology in accordance with IIA Standards and the Group Internal Audit methodology. Auditing digital asset technology auditing includes operating systems involving cryptocurrencies, tokens, custody solutions, blockchain based applications, smart contracts, and wallet security.

• \tPerform periodic and continuous risk assessments to identify and assess key risks arising from digital assets programmes and relevant technologies, new initiatives, regulatory changes and external developments.

• \tPlan and perform internal audit engagements in line with IIA Standards, including defining audit objectives, scope, and criteria for digital asset technology audits.

• \tObtain sufficient, reliable, relevant and useful information to provide a reasonable basis for audit conclusions, including through walkthroughs, control testing, data analysis, and interviews.

• \tEvaluate the design and operating effectiveness of governance, risk management and internal control processes over digital assets activities.

• \tAssess whether digital asset activities are conducted in line with the Group's risk appetite, internal policies and applicable laws and regulations.

• \tIdentify and clearly document audit findings, root causes, risk implications, and control weaknesses in accordance with Group Internal Audit standards and documentation requirements.

• \tCommunicate audit result through clear, accurate, and timely reporting to management and relevant governance forums and/or committees.

• \tMonitor and follow up on management actions plans to ensure effective and timely remediation of audit issues.

• \tMaintain independence and objectivity while providing credible and constructive challenge to management.

• \tCoordinate with other Group Internal Audit teams to ensure adequate coverage, avoid duplication, and support a consistent and integrated assurance approach.

• \tContribute to quality assurance and improvement activities within Group Internal Audit, including methodology enhancements and peer reviews.

• \tMaintain up-to-date knowledge of digital asset technology risks, regulatory expectations, and industry practices to continuously enhance audit effectiveness.

Risk Management

• Complete relevant risk assessment activities in a timely and effective manner, including the completion of the Risk Assessment template.

• Assist in continuous auditing and monitoring of key risks in the portfolio.

• Utilise the risk assessment process and stakeholder engagement to determine an anticipatory audit plan.

Governance

• Continuous engagement of stakeholders and establish good working relationship to help the businesses improve the control environment.

• Escalate delays in the execution of audit work, both to business and GIA management.

• Be able to clearly explain issues, along with the risks and root causes to GIA and business management. Use language designed to be understood by non-experts

Regulatory & Business Conduct

• Display exemplary conduct and live by the Group's Values and Code of Conduct.

• Take personal responsibility for embedding the highest standards of ethics, including regulatory and business conduct, across Standard Chartered Bank. This includes understanding and ensuring compliance with, in letter and spirit, all applicable laws, regulations, guidelines and the Group Code of Conduct.

• Effectively and collaboratively identify, escalate, mitigate and resolve risk, conduct and compliance matters.

Key Stakeholders

• Designated business and technology stakeholders, typically related to individual audit assignments and the assigned portfolio; and

• GIA stakeholders - team leaders, team members, team managers, Product, Functional, Country and Regional Heads of Audit.

Our Ideal Candidate

• \tA robust IT audit background (cybersecurity, blockchain, infrastructure) with 5+ years of experience.

• \tDeep knowledge of blockchain and distributed ledger technologies (DLT), including differences between public and private chains.

• \tExpertise in crypto custody and security, including private key management, cold/hot storage, and wallet infrastructure.

• \tGood understanding of smart contract logic, programming, and DeFi protocols.

• \tExperience executing risk based audit methodologies.

• \tStrong analytical skills, attention to detail, and intellectual curiosity.

• \tExcellent written and verbal communication skills, with the ability to translate complex technical issues into business friendly language.

• \tStrong interpersonal skills and the ability to build effective working relationships across GIA, business, and technology teams.

• \tHigh level of responsibility, self motivation, and ability to work independently while managing multiple tasks effectively.

• \tAbility to think critically and creatively in analysing information to support audit planning, fieldwork, and reporting.

• \tProactive attitude, willingness to learn, and ability to seek guidance when appropriate.

• \tHands on experience with analytics/visualisation tools (e.g., PowerBI, Tableau) and the ability to interpret and generate insights.

• \tAbility to design and perform data analytics. Certifications in analytics or AI/GenAI are an advantage.

Role Specific Technical Competencies

• Internal Audit

• Blockchain/Distributed Ledger Technology (DTL)/Smart Contracts

• Risk Management

• Technology

• Data analysis

• Product and Process

• Audit Report writing

About Standard Chartered

We're an international bank, nimble enough to act, big enough for impact. For more than 170 years, we've worked to make a positive difference for our clients, communities, and each other. We question the status quo, love a challenge and enjoy finding new opportunities to grow and do better than before. If you're looking for a career with purpose and you want to work for a bank making a difference, we want to hear from you. You can count on us to celebrate your unique talents and we can't wait to see the talents you can bring us.

Our purpose, to drive commerce and prosperity through our unique diversity, together with our brand promise, to be here for good are achieved by how we each live our valued behaviours. When you work with us, you'll see how we value difference and advocate inclusion.

Together we:

• \tDo the right thing and are assertive, challenge one another, and live with integrity, while putting the client at the heart of what we do

• \tNever settle, continuously striving to improve and innovate, keeping things simple and learning from doing well, and not so well

• \tAre better together, we can be ourselves, be inclusive, see more good in others, and work collectively to build for the long term

What we offer

In line with our Fair Pay Charter, we offer a competitive salary and benefits to support your mental, physical, financial and social wellbeing.

• \tCore bank funding for retirement savings, medical and life insurance, with flexible and voluntary benefits available in some locations.

• \tTime-off including annual leave, parental/maternity (20 weeks), sabbatical (12 months maximum) and volunteering leave (3 days), along with minimum global standards for annual and public holiday, which is combined to 30 days minimum.

• \tFlexible working options based around home and office locations, with flexible working patterns.

• \tProactive wellbeing support through Unmind, a market-leading digital wellbeing platform, development courses for resilience and other human skills, global Employee Assistance Programme, sick leave, mental health first-aiders and all sorts of self-help toolkits

• \tA continuous learning culture to support your growth, with opportunities to reskill and upskill and access to physical, virtual and digital learning.

• \tBeing part of an inclusive and values driven organisation, one that embraces and celebrates our unique diversity, across our teams, business functions and geographies - everyone feels respected and can realise their full potential.

Recruitment Assessments

Some of our roles use assessments to help us understand how suitable you are for the role you've applied to. If you are invited to take an assessment, this is great news. It means your application has progressed to an important stage of our recruitment process.

Visit our careers website www.sc.com/careers