Binance Accelerator Program - Internal Audit (Technology)

Binance is a leading global blockchain ecosystem behind the world’s largest cryptocurrency exchange by trading volume and registered users. Binance is trusted by more than 320 million people in 100+ countries for its industry-leading security, transparency, trading engine speed, protections for investors, and unmatched portfolio of digital asset products and offerings from trading and finance to education, research, social good, payments, institutional services, and Web3 features. Binance is devoted to building an inclusive crypto ecosystem to increase the freedom of money and financial access for people around the world with crypto as the fundamental means. About Binance Accelerator Program Binance Accelerator Program (BAP) is a 3-6 month internship program designed for Early Career talent to have firsthand experience in the rapidly expanding digital assets space. You will be given the opportunity to develop your skills at Binance and understand what it’s like to work at the world's leading blockchain ecosystem. As part of your internship in the BAP, there will also be opportunities for networking and development, which will expand your professional network and build transferable skills to propel you forward in your career. Learn about the BAP Program HERE. Who may apply Current university students and recent graduates. *Terms of employment / engagement shall be subject to contract and local applicable laws

Responsibilities

• Assist in the planning and execution of technology audits covering IT general controls (ITGC), application controls, infrastructure, cloud, and cybersecurity.
• Support testing of key controls such as logical access and identity management, change management, system development lifecycle (SDLC), and IT operations.
• Help review cloud and platform configurations (e.g., AWS/GCP/Alibaba Cloud), CI/CD pipelines, and DevOps practices against control and security expectations.
• Design and implement scripts/tools to automate audit procedures, continuous control monitoring, and data analysis.
• Extract, clean, and analyze data from logs, systems, and databases to identify control gaps, anomalies, and areas of risk.
• Prepare clear workpapers, reports, and presentations summarizing audit findings and recommendations for the Internal Audit team.
• Collaborate with auditors, engineering, security, and compliance stakeholders to support risk assessments and remediation tracking.
• Stay up to date on emerging technology risks, cybersecurity threats, cloud services, and audit best practices, including in blockchain and Web3 environments.

Requirements

• Working towards a Bachelor's or Master's degree in Computer Science, Information Systems, Cybersecurity, Data Science, Engineering, or a related field.
• Strong interest in technology risk, information security, and IT/technology auditing.
• Foundational understanding of IT concepts such as operating systems, databases, networks, cloud computing, and the software development lifecycle.
• Familiarity with data analysis and scripting tools (e.g., Python, SQL); ability to work with logs and large datasets.
• Ability to interpret technical information and synthesize clear, actionable insights.
• Strong written and verbal communication skills; ability to explain technical concepts to non-technical stakeholders.
• High attention to detail, ethics, and personal integrity.
• Bilingual English/Mandarin is required to be able to coordinate with overseas partners and stakeholders.

Preferred Qualifications

• Exposure to control frameworks and standards (e.g., COBIT, NIST, ISO 27001, SOC 2) or IT audit methodology.
• Familiarity with cloud platforms, containers/Kubernetes, CI/CD, or infrastructure-as-code.
• Awareness of cybersecurity concepts (identity and access management, encryption, vulnerability management, logging and monitoring).
• Interest in blockchain technology, smart contracts, and Web3 technology risks.
• Prior internship or project experience in IT audit, technology risk, cybersecurity, or data analytics.
• Relevant certifications or progress towards them (e.g., CISA, CISSP, CompTIA Security+, cloud practitioner) is a plus.