Internal Audit and ERM

Designation / Role: Manager – Internal Audit & Risk

Department: Internal Audit / Risk

Location: Mumbai, Andheri

Reporting Manager: Senior Management / Head of Internal Audit & Risk

Experience: 4–5 years

Qualification: CA

Role Overview

We are looking for a Manager – Internal Audit & Risk with hands-on experience in Internal Audit, Risk Assessment, Internal Controls, Enterprise Risk Management and Compliance .

The candidate will be responsible for identifying and assessing key business and operational risks, evaluating the effectiveness of internal controls, conducting risk-based internal audits, tracking audit observations and supporting management in strengthening the organisation's risk and control framework.

The role requires strong exposure to Internal Audit & Risk , with the ability to work closely with business functions, identify control gaps, assess risks and present actionable insights to senior management.

Key Responsibilities1. Internal Audit & Risk Assessment

• Plan and execute risk-based internal audits across business and support functions.
• Identify and assess financial, operational, compliance, process and strategic risks.
• Conduct process walkthroughs and evaluate the adequacy and effectiveness of internal controls.
• Identify control gaps, process weaknesses and potential areas of financial or operational risk.
• Prepare audit working papers, observations and supporting documentation.
• Recommend practical corrective and preventive actions to address identified risks.

1. Enterprise Risk Management

• Maintain and periodically update the Enterprise Risk Register .
• Coordinate risk assessments with various business and functional teams.
• Assess inherent and residual risks and monitor mitigation plans.
• Ensure risks are appropriately linked with business processes, controls, KPIs and KRIs.
• Monitor emerging risks and assess their potential impact on the organisation.
• Support enhancement of the ERM framework in line with recognised risk-management practices and regulatory expectations.

1. Internal Controls & Governance

• Review existing policies, SOPs and control frameworks and identify areas requiring improvement.
• Evaluate the design and operating effectiveness of key internal controls.
• Support management in strengthening governance, risk and control processes.
• Monitor implementation of agreed audit recommendations and maintain an audit issue/action tracker .
• Conduct follow-up reviews to ensure timely closure of audit observations.

1. Risk & Compliance

• Monitor compliance with applicable laws, regulations, internal policies and management guidelines.
• Identify compliance-related risks and control deficiencies.
• Coordinate with relevant stakeholders for remediation of identified gaps.
• Track regulatory and industry developments that may impact the organisation's risk profile.
• Support management in developing appropriate mitigation strategies for significant risks.

1. Management & Board Reporting

• Prepare Internal Audit and Risk dashboards, MIS and management reports .
• Present key audit findings, risk trends, control gaps and mitigation status to senior management.
• Support preparation of presentations for the CEO, Board of Directors, Audit Committee and senior leadership .
• Highlight significant risks, overdue action points, control failures and emerging risk areas.

1. Stakeholder Management

• Work closely with Finance, Operations, Legal, Compliance, Projects and other business functions.
• Conduct discussions with process owners to understand business processes and associated risks.
• Communicate audit observations clearly and work with stakeholders on practical remediation plans.
• Coordinate with external auditors, consultants and other assurance functions wherever required.

Key Skills & Competencies

• Strong hands-on experience in Internal Audit and Risk Management
• Risk-based internal audit methodology
• Enterprise Risk Management / Risk Register
• Internal controls and control testing
• Risk & Control Matrix (RCM)
• Process and compliance audits
• Root-cause analysis and risk assessment
• Audit observation and report writing
• Audit issue tracking and closure
• Risk dashboards, MIS and management reporting
• Strong analytical and problem-solving skills
• Excellent stakeholder-management and communication skills
• Strong presentation skills
• Advanced MS Excel and PowerPoint
• Knowledge of GRC / Risk Management tools will be an advantage

Good understanding of governance, compliance and regulatory requirements

Pay: ₹2,500,000.00 - ₹3,000,000.00 per year

Work Location: In person