Manager - Audit, Risk, and Controls

You will lead the design, implementation, and improvement of audit, risk management, and internal controls frameworks. You will conduct risk assessments and audits, maintain risk and controls records, coordinate external audits, monitor compliance requirements, and prepare audit, risk, and remediation reports for leadership.

Responsibilities

• Establish risk appetite frameworks and key risk indicators
• Conduct risk workshops, scenario planning, and stress testing
• Design, document, and implement internal control frameworks
• Design and oversee internal audit plans
• Conduct or coordinate internal audits across financial, operational, compliance, and IT domains
• Maintain audit documentation, working papers, and evidence repositories
• Coordinate external audits and track remediation of findings
• Develop audit charters, policies, and procedures
• Lead enterprise risk assessments
• Maintain the risk register and monitor mitigation strategies
• Establish control testing protocols and assess control effectiveness
• Identify control gaps and recommend improvements
• Maintain controls inventory and testing schedules
• Monitor regulatory and compliance requirements
• Support compliance with SOC 2, ISO standards, Cyber Essentials Plus, and other frameworks
• Prepare compliance status reports, remediation plans, audit reports, and risk summaries

Requirements

• Substantial experience in internal audit, risk management, or controls roles
• Knowledge of IIA standards, the COSO Internal Control Framework, ISO 31000, and NIST RMF
• Experience designing and implementing internal control frameworks across financial, operational, and IT domains
• Knowledge of SOC 2, ISO 27001, GDPR, and sector-specific regulations
• Audit and risk assessment skills
• Experience with audit management tools and GRC platforms
• CIA, CISM, or similar professional certification preferred