Job Description

We are seeking an Internal Audit, Risk & Compliance Manager to lead internal audit activities and support the Symbos' governance, risk and compliance objectives.

This role operates as an effective second line of defence, providing independent assurance across financial, operational, information security and compliance areas. You will take ownership of audit planning, risk assessments, ISO alignment and reporting, while working closely with key stakeholders across the business.

This position carries manager‑level accountability with end‑to‑end ownership of the internal audit function. While it may not include direct people management, it has clear responsibility for audit outcomes, governance frameworks and compliance reporting.

Key responsibilities

Internal Audit & Risk

• Manage the Internal Audit function and deliver independent assurance across the organisation
• Develop and execute a risk‑based annual internal audit plan
• Perform financial, operational, IT and compliance audits using recognised methodologies
• Identify, assess and report key business risks across finance, IT, operations and people
• Design audit programs to evaluate control effectiveness, efficiency and regulatory compliance
• Conduct follow‑up audits to monitor remediation and management actions

Information Security & Compliance

• Perform information security and IT audit activities, including control testing and risk assessments
• Support compliance with ISO standards including ISO 9001, ISO 27001, ISO 31000, ISO 22301 and ISO 45001
• Evaluate system processes for security, accuracy and completeness
• Monitor compliance with internal policies, client requirements and applicable regulations

Reporting & Stakeholder Engagement

• Prepare clear, professional audit reports with practical recommendations
• Provide regular risk and compliance updates to management and executive stakeholders
• Liaise with business leaders, external auditors, regulators and certification bodies
• Support the parent company with internal audit planning and related activities

Qualifications & experience

Qualifications

• Bachelor’s degree in Accounting, Finance, Commerce or Information Technology
• Professional certifications in Internal Audit, Risk or Compliance are an advantage
• ISO 27001 Lead Auditor certification is preferred

Experience

• Minimum 5 years’ experience in internal audit, risk management or compliance roles
• Experience delivering financial, operational and IT audits
• Strong report writing experience for management, risk committees or boards
• Experience working with cross‑functional stakeholders and external parties
• Exposure to ISO9001, ISO27001

Skills & attributes

• Strong analytical and problem‑solving skills with attention to detail
• Clear communicator able to engage and influence stakeholders
• Well organised with the ability to manage competing priorities
• High level of integrity and discretion
• Proficient in Microsoft Office and audit or risk management tools

Why join us

• Role with organisation‑wide exposure and meaningful impact
• Opportunity to shape audit, risk and compliance practices
• Collaborative and professional working environment
• Strong focus on quality, accountability and continuous improvement