Job Purpose:

The role is responsible for providing independent and objective assurance on the effectiveness of risk management, internal controls, governance, and business processes.

The position will lead the Internal Audit function with a focus on strengthening the organization's control environment and moving towards a more preventive and risk-focused approach to internal audit.

Key Responsibilities:

1. Risk Assessment & Audit Planning:

- Engage with business and functional heads to understand business processes, key risks, and emerging areas of concern.

- Participate in key projects and new initiatives to provide inputs from a risk and controls perspective.

- Develop and execute a risk-based internal audit plan covering key business and functional areas.

- Coordinate with internal and external assurance functions to minimize duplication and audit fatigue.

2. Audit Execution & Scope Management:

- Define and communicate audit scope, objectives, timelines, and methodology to relevant stakeholders.

- Conduct internal audits covering financial, operational, process, compliance, and technology-related areas.

- Evaluate the design and operating effectiveness of internal controls.

- Identify control gaps, process weaknesses, risks, and opportunities for improvement.

- Maintain independence and objectivity throughout the audit process.

3. Audit Findings & Recommendations:

- Communicate audit observations to business stakeholders during the course of audits.

- Evaluate management responses and consider mitigating controls and business-specific circumstances.

- Develop practical and value-adding recommendations to address identified control gaps.

- Agree on action plans and implementation timelines with business owners.

- Classify audit findings and assign appropriate risk ratings.

4. Audit Committee & Senior Management Reporting:

- Present significant audit findings, risk assessments, and overall audit status to senior management and the Audit Committee.

- Provide regular updates on the progress of the annual audit plan and special audit assignments.

- Highlight significant control deficiencies, emerging risks, and areas requiring management attention.

5. Audit Follow-up & Remediation:

- Monitor implementation of agreed corrective actions and recommendations.

- Establish a structured follow-up mechanism with business owners.

- Conduct periodic reviews to assess the status and effectiveness of remediation.

- Follow up on financial, operational, regulatory, and compliance deficiencies identified during audits.

6. Risk, Compliance & Assurance Collaboration:

- Work closely with Risk, Compliance, Finance, Legal, Technology, and other assurance functions.

- Ensure effective coordination while maintaining the independence of Internal Audit.

- Support a consistent and integrated approach to enterprise risk management and internal controls.

7. Team Leadership & Development:

- Lead, manage, and mentor the Internal Audit team.

- Develop team capabilities through coaching, training, and exposure to new audit methodologies and tools.

- Ensure effective allocation of audit resources and achievement of audit objectives.

- Stay updated on emerging audit standards, practices, technologies, and regulatory developments.

8. Technology & Data Analytics:

- Evaluate IT general controls, cybersecurity controls, technology risks, and digital business processes.

- Leverage data analytics and technology-enabled audit techniques to improve audit effectiveness and efficiency.

- Identify risks associated with automation, artificial intelligence, and emerging technologies.

- Promote the use of automated audit techniques and data-driven assurance.

9. Investigations & Special Reviews:

- Conduct investigations into irregularities, suspected fraud, financial misconduct, or control failures as required.

- Undertake special audits and reviews requested by senior management or the Audit Committee.

- Work with relevant internal and external stakeholders on investigations where required.

10. Internal Audit Function Management:

- Provide leadership and oversight for the Internal Audit function across business and functional areas.

- Develop and monitor the Internal Audit budget and resource requirements.

- Ensure effective utilization of audit resources and achievement of planned objectives.

- Continuously enhance Internal Audit methodologies, processes, tools, and reporting mechanisms.

Key Challenges:

- Maintaining independence and objectivity while working closely with business stakeholders.

- Managing changing business models, processes, and technology-driven risks.

- Assessing risks associated with highly automated and technology-enabled business environments.

- Keeping pace with evolving regulatory requirements, audit standards, technology, and emerging risks.

- Ensuring availability and development of appropriate audit, technology, data analytics, and risk management capabilities.

Key Decisions:

- Development and prioritization of the risk-based Internal Audit plan.

- Evaluation and risk ranking of control deficiencies based on their potential business impact.

- Determination of audit priorities, scope, resources, and appropriate recommendations.

- Identification of areas requiring special reviews, investigations, or management attention.

Skills & Competencies:

- Strong understanding of Internal Audit, Risk Management, Governance, and Internal Controls.

- Strong conceptual, analytical, and problem-solving skills.

- Strong business acumen and ethical standards.

- Excellent stakeholder management, influencing, networking, and advisory skills.

- Strong understanding of financial and operational processes.

- Knowledge of IT controls, cybersecurity, data analytics, and technology risks.

- Ability to work independently and manage multiple priorities.

- Strong written and verbal communication skills.

- Ability to lead, mentor, and develop an Internal Audit team.

- Ability to work under pressure and deliver assignments within defined timelines.

- Strong proficiency in MS Excel, PowerPoint, Word, and other audit/data analytics tools.

- Knowledge of professional auditing standards and frameworks.

Educational Qualification:

- Chartered Accountant (CA) preferred/required.

- CIA, CISA, or other recognized certifications in Audit, Risk, Controls, IT Audit, or related areas would be an advantage.

Experience:

- 12+ years of relevant experience in Internal Audit, Risk, Controls, Process Audit, or related areas.

- Strong experience in conducting financial, operational, process, compliance, and risk-based audits.

- Experience in auditing complex business processes and technology-enabled environments.

- Exposure to areas such as M&A transaction audits, treasury/debt audits, tax and legal transaction audits, and process re-engineering would be an advantage.

- Experience in the hospitality or other large, process-driven industries would be an advantage.

- Prior experience with a Big 4 / leading consulting or professional services firm is preferred.

- Strong understanding of emerging technologies and their application in Internal Audit.