Internal Auditor

OVERALL ROLE PURPOSE
To provide assistance with the design and implementation of Lula’s Internal Audit function operating under the Combined Assurance Department as part of the 3 lines of defence. The role will provide independent, objective assurance on the effectiveness of Lula’s risk management, control environment and governance processes. In collaboration with Risk Management and Compliance function, the role will determine Lula’s coverage map to ensure adequate and effective coverage of all risks. Further the role will conduct audits under the board approved coverage map and provide the board with an independent and objective review of the effectiveness and adequacy of Lula’s control environment as part of the Combined Assurance Department. 

KEY RESPONSIBILITIES

Internal Audit Implementation

• Provide guidance and support to effectively establish Lula’s Internal Audit Function operating under the 3 lines of defence model;
• Review and/or draft all governance documents required for the establishment of the Internal Audit Function.

Combined Assurance Integration

• Collaborate with Risk Management and Compliance Function to ensure effective and clear identification and assessment of risks in terms of Lula’s Risk Management Framework;
• Prioritise risk areas and items in order to determine the Combined Assurance Coverage map and ultimately submit the Combined Assurance Plan for board approval

Audit Execution

• Develop the Internal Audit Plan, aligned with the Combined Assurance Plan, to document planned audit activities;
• Lead and execute end-to-end internal audits in terms of the Internal Audit Plan which include all planning, engagement and reporting in accordance with the Institute of Internal Auditors (IIA) Standards; 
• Obtain and record sufficient, reliable and relevant evidence to support audit conclusions in line with IIA Standards.
• Evaluate and discuss findings with management and incorporate input where necessary.

Reporting

• Drafting of clear, concise and impactful audit reports for management as well as contribute to the Combined Assurance Report to the board;
• Articulate audit findings that identify root causes, impact and practical, risk‑based recommendations in line with the IA methodology.
• Include relevant and commercially viable recommendations to improve controls or address control gaps where necessary.

Remediation Monitoring

• Develop agreed remediation plan with set timelines with the relevant business unit to address control deficiencies highlighted in audit findings;
• Monitor and track implementation of agreed remediation action plan to ensure identified risks are mitigated within agreed timelines.

Regulatory Compliance

• In collaboration with the Compliance Function, provide additional support and independent assurance on controls aimed addressing any compliance risks;

THE SKILLS AND EXPERIENCE WE’RE LOOKING FOR

• Bachelor’s degree or 3 year diploma in internal auditing, finance, accounting or a related field;
• 3-4 relevant experience preferably in a similar role in a fast moving fintech specialising in innovative financial solutions;
• Preferably certified as an Internal Auditor by the IIA;
• Evaluate the effectiveness of risk management, governance and internal control processes;
• Analyse complex fact patterns and draw logical, evidence‑based conclusions;
• Excellent written, verbal and presentation skills; able to convey complex information clearly to different audiences;
• Gather, analyse and present data using appropriate techniques to support audit findings and recommendations;
• Plan, coordinate and control tasks for self and team to deliver engagements on scope, budget and schedule;
• Proficiency with audit management software, data analysis (CAATs) and productivity tools (Google Workspace, Microsoft Office etc);
• Ability to work independently, manage multiple priorities and deliver to schedule;
• High ethical standards and commitment to confidentiality and professional conduct;
• Adaptability to changing regulatory environments, industry practices and emerging technologies.