Head of Internal Audit

About the Role

Internal auditing is an independent, objective assurance and consulting activity designed to add value and improve an organization's operations. It helps an organization accomplish its objectives by bringing a systematic, disciplined approach to evaluate and improve the effectiveness of governance, risk management and control processes. 

The Head of Internal Audit is responsible for leading the internal audit function to ensure the effectiveness and efficiency of operations, reliability of financial reporting, and compliance with applicable laws and regulations. This role involves developing and executing a comprehensive audit strategy, identifying and mitigating risks, and providing insightful recommendations for continuous improvement in a fast-paced tech environment

What you'll do

• Audit Strategy: In alignment with the Group IA function, design  and manage Careem internal audit strategy which appropriately considers the relevant and evolving business risks facing Careem. specifically as well as any requirement of the Internal Audit Function per local laws and regulations
• Audit Planning and Execution: Establish professional expectations and ensure that all audits are conducted with best practice and in line with Group IA operating guidelines, a proper balance of objectivity and constructive contribution of ideas to improve effectiveness, efficiency of risk management in business processes.
• Audit Reporting: Prepare comprehensive audit reports with clear findings, actionable recommendations, and follow-up plans. Present these reports to senior management and the Audit Committee.
• Implementation Monitoring: Monitor the implementation of audit recommendations by management and provide ongoing support and reporting to management and to the Audit Committee..
• Risk Management: Partner with Careem Management to identify and maintain an objective view of Careem Risk Profile at all times.
• Compliance and Regulations: Ensure adherence to relevant laws, regulations, and industry standards. Provide guidance on compliance matters to various departments.
• Process Improvement: Collaborate with cross-functional teams to identify areas for process optimization and cost-saving initiatives.
• Stakeholder Communication: Prepare and maintain periodic communication with management and providing information on the status and results of the Audit Plan, highlighting successes or opportunities of Careem’s governance, risk management and control processes which support the organization achieve its strategic, operational, financial, and compliance objectives
• Coordinate Audit activities with Group IA as well as other external assurance or assessment parties, including the external auditors to ensure proper audit coverage, elimination of duplication of effort, and improvement in the efficiency and effectiveness of the audit activities.
• Outsourcing Coordination: Oversee and coordinate with external service providers and assess their performance. Provide feedback to management and the Audit Committee.
• Team Leadership: Progressively manage, recruit, and develop professionals to serve in the internal audit department and to become a source of leadership for the organization.
• Promote high levels of ethical awareness and conduct within the Company and under the oversight and guidance of Group IA Fraud Risk Management and Investigation leadership, administer independent investigations.

What you'll need

• A minimum of 10 years of internal audit or a risk management function in fast paced industries with a significant experience in tech driven business, including 5+ years with managerial responsibilities.
• Strong understanding of Technology (Infra, Application, Engineering, Product development lifecycle)  and microservice environment
• Comprehensive understanding of internal auditing and ability to drive internal audit operations and projects across the entire business spectrum.
• Robust experience in the MENA region and familiarity with the governance and Regulatory nuances across the region 
• Strong risk-minded individual with extensive experience in the following: 
• Managing audits within a complex operational and regulatory environment 
• evaluating risks and mitigating strategies/activities associated with complex business and systems in a devops and microservice environment
• working cross-functionally with diverse teams including Lines of Business, functional domains (Legal/Policy. Compliance, Finance, HR) s and in the tech space:  Engineering Security, Product, Platform Engineering
• serving as a trusted risk advisor to management and senior leadership in everything Business governance.
• Exceptional executive presence, influencing skills and the ability to discuss complex issues across all levels of the organization
• Strong supervisory and time management skills, including experience in managing a staff of diverse professionals
• Experience using the following various frameworks and standards: COSO, ITIL, COBIT, ISO, NIST, PCI DSS, SANS CIS, HIPAA, SOC, CIS top 20, GDP
• Minimum of Bachelor’s Degree in business or Technology/computer science or a related field though Graduate or Master’s Degree preferred/ combination of fields would be preferred
• CIA required, other professional credentials (CISA, CISSP, PMP, etc..)  is a plus