Internal Audit Senior Manager, Mukto Pay

Company Introduction As part of the global VEON Group, we are expanding into the digital financial services market to serve a broader customer base and strengthen our role in Bangladesh’s digital ecosystem. To advance this initiative, we are in the process of obtaining a Payment Service Provider (PSP) license via our newly established subsidiary called - NEO PSP Limited , a next-generation payment solutions company. Operating as a wholly owned subsidiary of Banglalink, one of the country’s leading digital operators, NEO PSP is built on the vision of enabling a cashless and connected future. The company empowers businesses to accept and process payments seamlessly through a secure, efficient, and scalable payment gateway, supporting the growth of digital commerce across Bangladesh. Leveraging Banglalink’s trusted digital ecosystem and technological expertise, NEO PSP aims to simplify financial transactions for enterprises of all sizes — from startups to large corporations. Our platform would support diverse payment methods, ensuring speed, reliability, and transparency in every transaction. At NEO PSP , we are committed to enabling digital financial (FINTECH) inclusion and accelerating Bangladesh’s journey toward a smarter digital economy. With innovation, compliance, security, and customer trust at our core, we strive to become the preferred payment solutions partner for businesses nationwide. Job Description Own execution of MuktoPay’s mandatory regulatory audits: Trust Fund safeguarding, AML/CFT independent testing, ICT Security Guideline compliance, Cybersecurity Framework & incident-reporting, e-KYC, Personal Data Protection Act 2026, and payment-licence conditions compliance Manage co-sourced SME engagements (cybersecurity, cloud, AML, data privacy) and ensure findings are integrated into the audit file Plan and deliver risk-based assurance reviews (fraud, BCP/DR, vendor risk, liquidity, transaction monitoring) Coordinate with external auditors and specialists (statutory audit, external AML/CFT audit, penetration testing, ISO 27001 certification) Keep the audit universe and regulatory mapping current as new rules take effect (e.g., recent PDPA 2026, revised e-KYC Guidelines, Cyber Security Ordinance 2025) Present audit results and the rolling 2-year audit roadmap to MuktoPay’s Audit Committee/Board and Banglalink IA leadership Supervise and develop junior audit staff (Senior Auditor, Auditor) Navigate the governance and independence considerations inherent in auditing a newly formed, fast-moving subsidiary while reporting centrally into Banglalink IA Provide an independent assessment/opinion, without fear or favour, to the Audit Committee on an annual basis on the state of internal controls at MuktoPay, based on audits conducted during the period and supported by specific audit observations and conclusions Support the Head of Internal Audit in formulating and implementing action plans that keep the audit function's practice aligned with the IIA's International Standards for the Professional Practice of Internal Auditing Help ensure the professional training needs of internal auditors are periodically identified and met, and that auditors demonstrate the highest ethical and professional standards in the performance of their duties Ensure significant outsourcing arrangements relevant to MuktoPay are reviewed to protect the Company's interests Support planning for adequate Internal Audit budget, systems, and human resources with the relevant qualifications, expertise, competencies and skills needed for MuktoPay's audit activities Monitor budget versus actual spend on audit services for MuktoPay and report utilization to the Audit Committee annually, together with analysis of any significant variances Engage regularly with the internal audit team to provide guidance and ensure auditors have the relevant technical and interpersonal skills and sufficient knowledge of the areas being audited to perform their responsibilities diligently Academic Qualification Master’s degree in Finance, Accounting, Business Administration, Economics, or a related field; or a professional accounting/audit qualification (ACA, ACCA, or CPA) — required Additional certifications such as CIA, CISA, or CAMS are preferred, but not mandatory Job Experience Required 8–12 years in internal or external audit, including at least 8–10 years in financial services, banking, digital payments, MFS, or fintech Direct experience auditing against a central bank regulatory framework (Bangladesh Bank experience strongly preferred; comparable emerging-market frameworks acceptable) Hands-on experience with AML/CFT audits and IT/cybersecurity audits (or demonstrated ability to manage co-sourced specialists covering these) Experience with a newly licensed, high-growth, or recently regulated entity will give added advantages Required Capabilities Working knowledge of Bangladesh’s payment-systems regulatory landscape (PSSA 2024, BPSSR 2014, ICT Security Guideline, BFIU AML/CFT guidance) — or the demonstrated ability to get there fast Strong stakeholder management; comfortable operating in a dual-reporting structure and pushing back constructively when management cooperation is uneven Risk-based audit planning, scoping, and report-writing to Board/Audit Committee standard Ability to manage and integrate work from co-sourced technical SMEs At least one relevant certification: CIA, CISA, CAMS, or CPA/CA equivalent (CISA or CAMS a strong plus given the cyber- and AML-heavy universe) Comfort with data analytics/CAATs for transaction testing (a known capability gap in MuktoPay’s current audit function) Familiarity with AI-based auditing approaches — e.g., using AI/LLM agents and models to support audit testing, continuous monitoring, and analytics — is an added advantage