Lead – Internal Controls, ERM and Audit

We are looking for an experienced professional to lead Internal Controls, Enterprise Risk Management (ERM), and Audit Governance for a large EPC/Projects business. The role will be responsible for strengthening the internal control framework, driving closure of audit observations, conducting control testing across business functions, enabling automation of controls, and embedding risk management practices across the organization.

The incumbent will act as a key interface between business operations, finance, functional teams, and Corporate Internal Audit to ensure a robust governance and compliance environment.

Key Responsibilities:

Internal Controls & Governance

• Review and enhance the internal control framework across functions and business processes.

• Identify control gaps, inefficiencies, and emerging risks and implement appropriate mitigation measures.

• Ensure controls remain aligned with evolving business requirements, system changes, and regulatory expectations.

  
  

Audit Management & Remediation

• Review internal and external audit reports and drive timely closure of audit observations.

• Coordinate with business and functional stakeholders to ensure accountability for corrective actions.

• Monitor closure status and escalate critical or overdue issues to management.

  
  

Internal Audit & Control Testing

• Plan and execute periodic control reviews across key business functions, including:

  • Project Execution & Operations

  • Procurement & Supply Chain

  • Finance & Commercial

  • Engineering & Planning

  • Sales & Pre-Bid Functions

  • Document findings, recommend improvements, and track implementation through closure.

    
    

Control Automation & ERP Governance

• Identify opportunities to automate manual controls through ERP platforms and digital tools.

• Collaborate with IT, Finance, and Operations teams to improve control effectiveness and auditability.

• Support implementation of workflow-based approvals, system controls, exception reporting, and automated monitoring mechanisms.

  
  

Segregation of Duties (SoD)

• Conduct periodic SoD reviews across ERP and operational processes.

• Identify access conflicts and recommend mitigating controls.

• Maintain and update SoD matrices in line with organizational and system changes.

  
  

Enterprise Risk Management (ERM)

• Drive ERM implementation and governance within the business.

• Facilitate risk identification and assessment workshops.

• Maintain risk registers and monitor mitigation plans.

• Support periodic reporting of key risks and emerging issues to leadership teams.

  
  

Stakeholder Management

• Act as the primary liaison between Corporate Internal Audit, Finance, Business Leadership, and Functional Teams.

• Support audit planning, walkthroughs, management reviews, and governance discussions.

• Promote awareness and alignment on risk, control, and compliance priorities.

Success Measures:

• Reduction in repeat audit observations.

• Increased control automation and compliance effectiveness.

• Timely closure of audit findings and corrective actions.

• Strong collaboration between business, finance, and audit teams.

• Effective implementation and adoption of ERM practices across the organization.