Director of Internal Audit

You’ll design and build Mews’ SOX and internal controls programme from the ground up, deciding how controls are scoped, owned, tested and evidenced across financial reporting, operations and technology. This role exists because the company needs a control framework that holds up as it grows across entities and regulated financial services. You’ll work hands-on with process owners across the business, with the mandate to make the controls work in practice.

Part 1: You’ll set up the framework and roadmap, assign control owners, and lead testing and remediation. You’ll work directly with process owners, Technology, Legal, Compliance and Risk, and report progress and significant risks to senior leadership and governance bodies.

Part 2: Business and functional owners run their own controls, so the job is to set clear standards and provide independent verification that those controls operate as designed. The problem to solve is a control environment that is sustainable, evidenced and audit-ready, rather than one assembled for each audit.

What you would do (change to Heading 4)

Build and implement Mews’ SOX and internal controls programme end to end, from risk-based scoping and control design through rollout, testing, remediation and management certification, on an achievable roadmap.

Establish a COSO-aligned, company-wide control framework with named control owners, clear evidence requirements and periodic owner certifications.

Turn local, EU and financial-services regulatory control expectations into one coordinated implementation plan with Legal, Compliance and Risk.

Drive testing of IT general controls, and set validation standards for critical reports, spreadsheets and AI-supported evidence, working with process owners to close gaps and verify fixes.

Set the risk-based monitoring plan, establish AI governance and controls over AI-enabled finance processes, and report progress and significant risks to leadership.

AI Fluency Level 4: This is an AI Fluency Level 4 role, which means you’d build AI-powered systems rather than only using AI in your own work. Here that could mean building the monitoring and evidence tools that test controls over AI-enabled finance processes, using automation and continuous monitoring to check that controls operate, with the human oversight and audit trails that keep them credible. For more information on AI fluency at Mews, please refer to “AI Fluency at Mews: A Comprehensive Guide for Candidates” on Confluence.

What you would bring (change to Heading 4)

10+ years of progressive experience in internal audit, SOX, internal controls or risk assurance, including 3+ years leading teams or significant cross-functional programmes.

Proven experience building and rolling out a SOX or COSO-based controls programme, not only testing an established one, including control design, owner accountability, certification and sustainable remediation.

Experience in an international, multi-entity environment, with working knowledge of IT general controls, system interfaces, access and change management, and data reliability.

Ability to influence senior stakeholders and present clear, risk-based findings, with experience engaging external auditors, regulators where applicable, and consultants.

AI Fluency Level 4: you have built AI-powered tools or systems that others use, with a working understanding of AI governance, evidence validation and human oversight.

Nice to have (change to Heading 4)

A relevant professional qualification such as CIA, CPA, ACA, ACCA or CISA.

Hands-on experience with GRC or SOX management platforms such as AuditBoard or Workiva, plus familiarity with Jira or similar tools.

Experience in technology, SaaS or fintech.

UK

£105,500—£133,000 GBP