VP Internal Audit, Risk & Compliance

The organisation operates through multiple business units, supported by a central group function responsible for setting consistent standards, providing independent oversight and strengthening governance, while maintaining clear accountability at operating company level.

The role will lead the development and delivery of an integrated assurance and risk framework, providing independent assessment of key risks and controls while strengthening governance and compliance across the organisation. Working closely with executive leadership, operating company management and the Audit Committee, the successful candidate will provide constructive challenge, drive remediation and ensure that assurance activities support the organisation’s strategic priorities.

The role requires a senior, commercially minded leader who combines strong technical expertise with sound judgement and the ability to build a lean, effective function, working in partnership with internal stakeholders and external specialists.

Key Responsibilities:

Internal Audit & Assurance

• Develop and maintain a risk-based internal audit strategy and annual audit plan, ensuring appropriate coverage of material risks, key controls and business processes.
• Oversee the delivery of internal audit activities, coordinating internal resources and external audit or assurance partners as required.
• Evaluate findings, challenge management responses and monitor remediation to ensure issues are addressed effectively and within agreed timescales.
• Oversee targeted reviews and investigative audits where required, maintaining appropriate independence and confidentiality.
• Provide clear, independent assurance to executive leadership and the Audit Committee on the effectiveness of governance, risk management and internal controls.

Enterprise Risk Management & Governance

• Develop and embed a group-wide enterprise risk management framework aligned with business strategy, risk appetite and governance requirements.
• Establish appropriate risk policies, standards, reporting and escalation processes across the organisation.
• Provide independent oversight and constructive challenge on material financial, operational, regulatory, technological and strategic risks.
• Work with senior leaders and operating-company management to strengthen risk ownership, accountability and decision-making.

Internal Controls & Governance Readiness

• Lead the development and ongoing effectiveness of the internal control framework, including readiness for applicable public-company reporting and internal control requirements.
• Establish clear control ownership, accountability and reporting across group and operating-company functions.
• Oversee the assessment and testing of control design and operating effectiveness, ensuring deficiencies are identified, escalated and remediated.
• Work with Finance, business leaders and external auditors to strengthen financial reporting controls and maintain an appropriate level of assurance as the organisation evolves.

Compliance, Policies & Conduct

• Establish and maintain a robust compliance framework, including policy governance, communication, training, awareness and compliance monitoring.
• Partner with relevant business owners to ensure policies and procedures are practical, understood and consistently applied.
• Oversee whistleblowing processes and the handling of Code of Conduct allegations, ensuring appropriate escalation, investigation and follow-up.
• Provide clear and accurate reporting to executive leadership and the Audit Committee on compliance matters, key incidents and remediation.

Operating Model & External Partner Management

• Develop an effective, scalable delivery model combining a lean internal team with specialist external partners.
• Set clear expectations for quality, timeliness, cost, accountability and reporting across outsourced audit, risk, compliance and control activities.
• Maintain appropriate oversight of external providers, ensuring work meets organisational standards and delivers meaningful insight and assurance.
• Continuously review the operating model to improve efficiency, coverage and value.

Executive Insight, Reporting & Culture

• Provide concise, actionable reporting to executive leadership and the Audit Committee on key risks, audit findings, control effectiveness and compliance matters.
• Translate complex risk and assurance issues into clear implications, priorities and recommended actions.
• Identify opportunities to use technology, automation and data analytics to improve assurance coverage, efficiency and insight.
• Promote a culture of integrity, accountability and proactive risk management throughout the organisation.

Candidate Requirements:

• Significant senior leadership experience across internal audit, enterprise risk, internal controls and compliance within a complex organisation.
• Experience engaging with executive leadership and an Audit Committee, with the credibility and independence to challenge senior stakeholders constructively.
• Strong technical understanding of internal audit methodologies, risk and control frameworks, including COSO, and relevant corporate governance requirements.
• Knowledge of public-company control requirements, including SOX or equivalent frameworks, and experience supporting readiness for an IPO or similar governance transition.
• Demonstrable experience developing risk-based audit plans, overseeing assurance activity and managing external audit, risk or compliance providers.
• A track record of strengthening internal controls, monitoring remediation and establishing clear accountability across multiple business units.
• Experience using technology, automation or data analytics to improve the efficiency, coverage and quality of audit and assurance activities.
• Experience working across international, matrixed organisations and building effective, proportionate operating models.

Leadership Profile:

The successful candidate will demonstrate:

• Enterprise perspective: The ability to balance group-wide standards and oversight with the needs and accountability of individual businesses.
• Independent judgement: The confidence to challenge constructively, escalate material issues and maintain professional independence.
• Commercial pragmatism: The ability to translate technical requirements into proportionate, practical solutions that support business performance.
• Execution and pace: A track record of establishing frameworks, improving processes and delivering tangible outcomes in changing environments.
• Collaboration: The ability to build trusted relationships with executive leaders, operating-company management, external advisers, auditors and specialist service providers.
• Integrity and discretion: High ethical standards, sound judgement and the courage to address sensitive issues appropriately.