IT Internal Auditor

On-site, Hybrid
Prague
Full-time

We are SatoshiLabs, world-renowned pioneers in digital security and a bitcoin-first tech holding. We defined a whole new industry and proudly stand behind extraordinary projects, such as Trezor, Invity, Tropic Square and Vexl.

As an IT Internal Auditor at SatoshiLabs, you will assess, monitor, and improve IT security controls and regulatory compliance across critical systems. You will develop and execute an IT audit plan to ensure compliance with MiCA, DORA, and NIS2, including the preparation of compliance reports addressing MiCA requirements.

This role involves collaborating with IT, Security, Compliance, and Legal teams to evaluate IT controls, identify security risks, and recommend improvements to enhance cybersecurity and operational resilience.

If you're passionate about driving security excellence, this is the perfect job for you!

👉 What will your duties be?

Develop and execute a comprehensive IT audit plan with a focus on MiCA, DORA, and NIS2
Conduct compliance testing, control assessments, and audits on access management, security logging, risk mitigation, and overall security compliance in collaboration with experienced colleagues
Analyze audit results to identify vulnerabilities and non-compliance issues; document findings and recommend corrective actions
Engage with internal teams and external stakeholders to ensure adherence to industry standards and regulatory requirements

💪 What makes you a perfect candidate?

2+ years in IT audit, cybersecurity, or compliance roles
Proven experience in security audits, risk management, or regulatory compliance
Demonstrate solid understanding of IT/information security, including processes, operational systems, databases, and IaaS infrastructure (e.g., AWS, DigitalOcean, Cloudflare)
Basic knowledge of DORA, NIS2, ISO 27001, and NIST frameworks
Familiarity with SIEM, log analysis, and security incident investigations, with a basic understanding of their role in cybersecurity
Familiarity with industry standards (e.g., ISO 27001) and best practices is essential
CRISC and ISO 27001 Lead Auditor certification are an advantage
Strong analytical and communication skills to assess risks, identify security gaps, and collaborate effectively with internal teams and external stakeholders
Possess proficiency in English and Czech (spoken and written) is required

🤝 What will you get in return?

Unique opportunity to be a part of a brand that has revolutionized the crypto industry more than once
Possibility to receive part of your compensation in bitcoin
Flexible working hours, as well as the possibility of working from home
Budget for professional development (training programs, courses, and workshops of your choice)
Renovated offices (including gym, football table, billiards, PlayStation and 3D printer)
Other benefits include a MultiSport card, company mobile phone tariff, and more.
Free on-site parking

👋 Sounds good? Please don't hesitate to submit your CV, together with a cover letter. We’ll get in touch with you as soon as we review your application, most likely within a week.