Internal Auditor
VelaFi · São Paulo, Brazil
**About VelaFi** At VelaFi, we're building the future of global financial infrastructure. As a stablecoin\-powered platform, we help businesses move money across borders faster, more securely, and more efficiently by connecting local banking rails, global payment networks, and leading stablecoin ecosystems through regulated entities across Latin America, Asia, and the United States. Our mission extends beyond payments—we are creating the infrastructure that enables businesses to operate confidently in an increasingly connected world. By combining innovative technology with regulatory excellence, we simplify complex global financial operations while maintaining the highest standards of compliance, security, and reliability. **Position Overview** VelaFi Brazil is seeking an independent **Internal Auditor** to establish and execute our internal audit framework required for Banco Central do Brasil (BCB) VASP/PSAV authorization under Resolution BCB No. 552/2025\. In this role, you will objectively evaluate the effectiveness of our governance, risk management processes, AML/CFT controls (Circular BCB No. 3,978/2020\), cybersecurity measures, and cross\-border payment operations. **Location** **Hybrid: Sao Paulo, Brazil** Candidates must reside in Brazil and be legally authorized to work in the country. Periodic travel within Brazil and internationally may be required. **Key Responsibilities** * **Audit Plan \& Execution:** Design and execute an annual risk\-based internal audit plan approved by the Board of Directors. * **AML/CFT \& Regulatory Testing:** Conduct independent testing of AML/CFT controls (KYC/KYB, transaction monitoring, sanctions/PEP screening, SAR/ROS procedures). * **Custody \& Segregation Review:** Evaluate asset segregation and digital asset custody controls in compliance with BCB regulations (e.g., Res. BCB 520\). * **Cybersecurity \& Tech Audits:** Assess IT controls, key management, Identity \& Access Management (IAM), Business Continuity (BCP), and Disaster Recovery (DRP) frameworks (Res. BCB 552 / Res. BCB 85\). * **Reporting \& Escalation:** Report findings, control deficiencies, and remediation status directly to the Board. Support mock regulatory audits and pre\-filing BCB readiness reviews. **Qualifications** * Experience: Proven experience in internal/external audit or risk assurance within financial institutions, payment institutions (IP), or licensed VASPs/crypto entities in Brazil. * Regulatory Knowledge: Deep understanding of the BCB regulatory framework (Res. BCB 552, Circ. 3,978/2020\). * Certifications: CIA (Certified Internal Auditor), CISA, CPA, or equivalent credentials preferred. * Languages: Professional fluency in English and Portuguese. **Desired Competencies** * Financial Controls \& Governance: Strong expertise in evaluating internal control frameworks, corporate governance, operational workflows, and segregation of customer assets. * Regulatory Reporting \& Audit Expertise: Familiarity with BCB audit requirements and regulatory systems, including Unicad (IN BCB 712/713\), COSIF accounting frameworks, and AML/CFT compliance. * Executive Presence \& Independence: Ability to report directly and present objective findings to the Board of Directors and external regulators without operational bias. * Strong Analytical \& Decision\-Making Skills: Demonstrated skill in conducting root\-cause analyses, dissecting complex transaction logs, and identifying systemic control gaps. * High Accountability \& Ownership: Results\-driven approach to tracking audit remediation plans and ensuring timely resolution of audit findings. * Cross\-Functional Collaboration: Ability to collaborate constructively with Compliance, Risk, Engineering, and Finance teams while maintaining strict audit independence. * Ability to build scalable audit infrastructure: Experience establishing risk\-based internal audit methodologies, automated sampling procedures, and testing frameworks that scale from early\-stage authorization to high\-volume cross\-border operations. **Nice to Have** * Cross\-Border \& FX Audit Experience: Background auditing foreign exchange (Câmbio/eFX), international remittance rails, and multi\-currency liquidity settlement. * Digital Assets \& Crypto Auditing: Practical knowledge auditing blockchain transactions, digital asset custody (Res. BCB 520\), and stablecoin flows (USDT/USDC). * Professional Certifications: Active CIA (Certified Internal Auditor), CISA (Certified Information Systems Auditor), CFA, or active CRC (Conselho Regional de Contabilidade). * RegTech \& Automation Tools: Experience testing or auditing automated transaction monitoring, automated BACEN reporting software, and reconciliation engines. **Regulatory Requirements (Brazil VASP)** Candidates selected for this position must be eligible to satisfy applicable Brazilian regulatory requirements, including: * Be legally authorized to reside and work in Brazil. * Possess the qualifications, experience, and professio