Global Payments Technology Audit Lead - Internal Audit

About the role

Internal Audit at ByteDance is a global function that provides independent assurance on risk management, governance and internal controls. It is seeking an experienced Global Payments Technology Internal Audit Lead to join the Global Technology Audit team. The role supports ByteDance businesses outside China and leads audits and risk reviews across the global payment, lending and fintech ecosystem, reporting to the Head of Global Payments Technology Audit.

Key responsibilities

• Develop and execute the global technology audit strategy for payment, lending and other regulated financial products outside China, and lead complex, risk-based audits and advisory reviews from planning through reporting.
• Cover payment technology architecture and platforms, end-to-end payment processing, and payment security and integrations.
• Assess technology, security, operational resilience, data and regulatory risks, and give risk-based recommendations to engineering and product teams.
• Use data analytics to detect risk signals and apply AI to build audit solutions; communicate findings to senior management.
• Track remediation plans with risk owners and report progress regularly.
• Maintain stakeholder relationships and ensure audit quality and consistency.

Required profile

• At least 5 years of experience in technology auditing, fintech, regulated payments or lending.
• Experience leading complex technology audits or risk reviews independently.
• Strong understanding of payment systems, transaction flows, technology architecture and controls.
• Excellent problem-solving, critical thinking, collaboration and communication skills, with strong professional judgment.
• Proficiency in Mandarin is required.
• Preferred: familiarity with MAS, BNM, BI and SBV payment regulations, PCI DSS, open banking and financial data protection; experience in a fast-paced, global technology company.

Required skills

• Data analytics and automated audit testing
• SQL, Python or other technology-enabled audit techniques (preferred)
• Professional certifications such as CISA, CISSP, CRISC or CIA (preferred)