Internal Auditor

About VelaFi

At VelaFi, we're building the future of global financial infrastructure. As a stablecoin-powered platform, we help businesses move money across borders faster, more securely, and more efficiently by connecting local banking rails, global payment networks, and leading stablecoin ecosystems through regulated entities across Latin America, Asia, and the United States.

Our mission extends beyond payments—we are creating the infrastructure that enables businesses to operate confidently in an increasingly connected world. By combining innovative technology with regulatory excellence, we simplify complex global financial operations while maintaining the highest standards of compliance, security, and reliability.

Position Overview

VelaFi Brazil is seeking an independent Internal Auditor to establish and execute our internal audit framework required for Banco Central do Brasil (BCB) VASP/PSAV authorization under Resolution BCB No. 552/2025.

In this role, you will objectively evaluate the effectiveness of our governance, risk management processes, AML/CFT controls (Circular BCB No. 3,978/2020), cybersecurity measures, and cross-border payment operations.

Location

Hybrid: Sao Paulo, Brazil

Candidates must reside in Brazil and be legally authorized to work in the country. Periodic travel within Brazil and internationally may be required.

Key Responsibilities

• Audit Plan & Execution: Design and execute an annual risk-based internal audit plan approved by the Board of Directors.
• AML/CFT & Regulatory Testing: Conduct independent testing of AML/CFT controls (KYC/KYB, transaction monitoring, sanctions/PEP screening, SAR/ROS procedures).
• Custody & Segregation Review: Evaluate asset segregation and digital asset custody controls in compliance with BCB regulations (e.g., Res. BCB 520).
• Cybersecurity & Tech Audits: Assess IT controls, key management, Identity & Access Management (IAM), Business Continuity (BCP), and Disaster Recovery (DRP) frameworks (Res. BCB 552 / Res. BCB 85).
• Reporting & Escalation: Report findings, control deficiencies, and remediation status directly to the Board. Support mock regulatory audits and pre-filing BCB readiness reviews.

Qualifications

• Experience: Proven experience in internal/external audit or risk assurance within financial institutions, payment institutions (IP), or licensed VASPs/crypto entities in Brazil.
• Regulatory Knowledge: Deep understanding of the BCB regulatory framework (Res. BCB 552, Circ. 3,978/2020).
• Certifications: CIA (Certified Internal Auditor), CISA, CPA, or equivalent credentials preferred.
• Languages: Professional fluency in English and Portuguese.

Desired Competencies

• Financial Controls & Governance: Strong expertise in evaluating internal control frameworks, corporate governance, operational workflows, and segregation of customer assets.
• Regulatory Reporting & Audit Expertise: Familiarity with BCB audit requirements and regulatory systems, including Unicad (IN BCB 712/713), COSIF accounting frameworks, and AML/CFT compliance.
• Executive Presence & Independence: Ability to report directly and present objective findings to the Board of Directors and external regulators without operational bias.
• Strong Analytical & Decision-Making Skills: Demonstrated skill in conducting root-cause analyses, dissecting complex transaction logs, and identifying systemic control gaps.
• High Accountability & Ownership: Results-driven approach to tracking audit remediation plans and ensuring timely resolution of audit findings.
• Cross-Functional Collaboration: Ability to collaborate constructively with Compliance, Risk, Engineering, and Finance teams while maintaining strict audit independence.
• Ability to build scalable audit infrastructure: Experience establishing risk-based internal audit methodologies, automated sampling procedures, and testing frameworks that scale from early-stage authorization to high-volume cross-border operations.

Nice to Have

• Cross-Border & FX Audit Experience: Background auditing foreign exchange (Câmbio/eFX), international remittance rails, and multi-currency liquidity settlement.
• Digital Assets & Crypto Auditing: Practical knowledge auditing blockchain transactions, digital asset custody (Res. BCB 520), and stablecoin flows (USDT/USDC).
• Professional Certifications: Active CIA (Certified Internal Auditor), CISA (Certified Information Systems Auditor), CFA, or active CRC (Conselho Regional de Contabilidade).
• RegTech & Automation Tools: Experience testing or auditing automated transaction monitoring, automated BACEN reporting software, and reconciliation engines.

Regulatory Requirements (Brazil VASP)

Candidates selected for this position must be eligible to satisfy applicable Brazilian regulatory requirements, including:

• Be legally authorized to reside and work in Brazil.
• Possess the qualifications, experience, and professional competence required to perform executive responsibilities.
• Hold any professional registrations or licenses required under Brazilian law to perform the responsibilities of the position, where applicable.
• Successfully complete background checks and regulatory due diligence.
• Be eligible to serve as an executive of a regulated financial institution under applicable Brazilian laws.
• Have no disqualifying criminal convictions, financial crimes, or regulatory restrictions that would prevent appointment.
• Not have been declared bankrupt or legally insolvent.
• Not have been suspended or prohibited from serving as an executive of regulated financial institutions.
• Meet any additional "fit and proper" requirements established by the Central Bank of Brazil (BACEN) and other applicable regulatory authorities.

Equal Employment Opportunity

VelaFi is proud to be an Equal Opportunity Employer. We are committed to fostering a diverse, inclusive, and respectful workplace where everyone has the opportunity to thrive. We make employment decisions based on qualifications, merit, and business needs, and do not discriminate on the basis of race, color, religion, creed, sex, sexual orientation, gender identity or expression, national origin, ancestry, age, disability, veteran status, genetic information, or any other characteristic protected by applicable federal, state, or local law.