Position Overview: Bridge Building S.A. (BBSA) is building a Luxembourg-regulated EMI and CASP. We are seeking an Internal Auditor manager to establish and execute a risk-based internal audit approach across core regulated-entity domains, including governance, safeguarding, treasury, AML/CTF, ICT/DORA, and outsourcing. The role will be reporting to the Internal Audit Officer based based in Ireland.
Key Responsibilities:
- Audit Planning and Execution:
- Develop with the Internal Audit Officer and maintain a risk-based annual audit plan aligned with BBSA’s risk profile and regulatory priorities.
- Execute audits end-to-end (scoping, walkthroughs, control testing, sampling, issue grading, and reporting).
- Regulated Entity Coverage:
- Audit key frameworks and operations, including AML/CTF controls, safeguarding and reconciliation processes, treasury operations, ICT risk management, incident governance, and outsourcing oversight.
- Assess design and operating effectiveness of controls and identify root causes for weaknesses.
- Reporting and Remediation Follow-Up:
- Produce clear audit reports with pragmatic remediation actions and timelines.
- Track action plans to closure, validate fixes, and report progress to Internal Auditor Officer senior management and the Board/Audit Committee.
- Coordination and Inspection Support:
- Coordinate with external auditors and support supervisory inspections by preparing evidence and independent perspectives.
- Contribute to continuous improvement of audit methodology, documentation standards, and quality assurance.
Key Requirements:
Education:
- Bachelor’s or Master’s degree in Accounting, Finance, Business, or a related discipline.
Experience:
- 5+ years in internal audit or equivalent assurance roles within regulated financial services.
- Experience in payments/EMI/PI and/or fintech/crypto is advantageous.
Certifications:
- CIA, CISA, or equivalent certification strongly preferred.
Skills:
- Ability to plan and execute internal audits across finance, operations, compliance, IT and cybersecurity.
- Strong interpersonal skills with the ability to create trust with stakeholders.
- Strong analytical, investigative, control testing and reporting skills; excellent judgment and ability to communicate issues clearly to senior stakeholders as well as produce clear written assessments and regulatory-ready documentation
- Adaptable, self driven and comfortable in a fast paced, evolving environment.
- High standards of professionalism, independence, and discretion.
Languages:
