Internal Audit Manager

Reports To: CISO

Department: Governance, Risk & Compliance (GRC)

Position Summary

We are seeking a highly skilled and strategic Internal Audit Manager to lead and evolve our internal audit function across all business units and departments. This role is critical in supporting our compliance with ISO 27001, PCI DSS, and SOC 2 frameworks, while also ensuring robust financial and operational controls. The ideal candidate will bring a strong background in accounting and finance audits, GRC, and information security, and will play a key role in shaping our audit strategy, risk posture, and control environment.

Key Responsibilities

• Audit Leadership & Execution
  1. Develop and execute a comprehensive internal audit plan covering financial, operational, IT, and compliance audits.

• Lead audits across departments, ensuring alignment with ISO 27001, PCI DSS, and SOC 2 Type II standards.
• Coordinate with external auditors and certification bodies to support annual assessments and evidence gathering.

• Governance, Risk & Compliance (GRC)
  1. Collaborate with GRC and Security teams to assess and improve internal controls, risk management practices, and policy compliance.

• Maintain and enhance the internal audit framework in alignment with Alvaria's ISMS and risk register in Notion.

• Security & Regulatory Compliance
  1. Support vulnerability management, access reviews, and secure configuration practices.

• Monitor and report on compliance with legal and regulatory requirements, including documentation of non-conformities and corrective actions.

• Financial & Operational Controls
  1. Conduct audits of accounting and finance processes to ensure accuracy, integrity, and compliance with GAAP and internal policies.

• Evaluate internal control deficiencies and recommend improvements to senior leadership.

• Process Improvement & Automation
  1. Identify opportunities to automate audit processes and integrate audit tracking into platforms like Notion.

• Drive continuous improvement in audit methodology, documentation, and reporting.

Qualifications

• 7+ years of experience in internal audit, with at least 3 years in a managerial or lead role.
• Deep understanding of ISO 27001, PCI DSS, SOC 2, and GRC frameworks.
• Strong knowledge of financial auditing, internal controls, and risk assessment methodologies.
• Experience working in cloud-based environments and with tools like Microsoft Purview, Defender, or Notion is a plus.
• Excellent communication, leadership, and stakeholder management skills.