Manager – Business Audit, Risk Advisory & Controls Assurance

Role Summary

We are seeking an experienced Manager – Business Audit & Risk Advisory to lead and deliver Internal Audit, Risk Advisory, SOX, Internal Financial Controls (IFC), Governance, Risk & Compliance (GRC), Enterprise Risk Management (ERM), and Business Process Improvement engagements across diverse industries.

The role requires strong expertise in evaluating business processes, assessing governance and controls frameworks, identifying emerging risks, and driving remediation initiatives. The ideal candidate will possess strong client relationship management, engagement leadership, team management, and business development capabilities.

In addition to core Business Audit responsibilities, the candidate should have a working understanding of Technology Risks, IT General Controls (ITGC), ERP environments, and digital transformation risks to effectively participate in integrated audits.

Key Responsibilities

Internal Audit & Risk Advisory

• Lead and manage Internal Audit, Risk Advisory, SOX, IFC, ERM, and Controls Assurance engagements.
• Develop risk-based audit plans, audit programs, testing strategies, and reporting frameworks.
• Evaluate governance, risk management, and internal control environments across business functions.
• Conduct enterprise-wide risk assessments and develop risk-based audit approaches.
• Assess design and operating effectiveness of controls.
• Identify operational, financial, compliance, regulatory, strategic, and emerging risks.
• Lead root cause analysis and remediation discussions with management.
• Review audit observations and ensure quality of deliverables.
• Prepare executive summaries, Audit Committee presentations, and management reports.

Business Process Audits

Lead reviews across key business processes including:

Finance & Accounting

• Record-to-Report (R2R)
• Financial Close & Reporting
• Treasury Operations
• Fixed Assets
• Intercompany Processes
• Financial Controls

Revenue & Commercial Processes

• Order-to-Cash (O2C)
• Revenue Recognition
• Contract Management
• Accounts Receivable
• Collections Management

Procurement & Operations

• Procure-to-Pay (P2P)
• Vendor Management
• Inventory Management
• Logistics & Supply Chain
• Capex Management

Human Resources

• Hire-to-Retire Processes
• Payroll Operations
• Employee Benefits
• HR Governance

Regulatory & Compliance

• Compliance Programs
• Policy Governance
• Regulatory Compliance Reviews
• Ethics & Conduct Reviews

Governance, Risk & Compliance (GRC)

• Evaluate governance structures and organizational risk management frameworks.
• Assess effectiveness of Enterprise Risk Management (ERM) programs.
• Review policy management and regulatory compliance frameworks.
• Conduct risk and control self-assessment (RCSA) reviews.
• Support compliance monitoring and assurance activities.
• Assess fraud risk management and operational risk frameworks.

SOX, IFC & Controls Assurance

• Lead SOX and IFC engagements across multiple business cycles.
• Review Risk Control Matrices (RCMs) and control frameworks.
• Evaluate preventive, detective, and monitoring controls.
• Perform design effectiveness and operating effectiveness assessments.
• Support remediation planning and deficiency evaluations.
• Assess management action plans and closure evidence.

Technology Risk Awareness (Preferred)

While this role is primarily focused on Business Audit, candidates should possess awareness of:

• IT General Controls (ITGC)
• ERP Controls (SAP, Oracle, Workday)
• Automated Business Controls
• User Access Governance
• Segregation of Duties (SoD)
• Technology-enabled Business Processes
• Digital Transformation Risks
• Data Governance & Data Quality Risks

Ability to participate in integrated business and technology audits is desirable.

Data Analytics & Continuous Auditing

• Leverage data analytics to identify trends, anomalies, and control failures.
• Drive continuous auditing and monitoring initiatives.
• Use data-driven insights to enhance audit effectiveness.
• Interpret large datasets and provide business-focused recommendations.

Preferred Tools

• Power BI
• Alteryx
• Tableau
• SQL
• Advanced Excel
• Audit Analytics Tools

Client & Stakeholder Management

• Serve as engagement manager and primary point of contact for clients.
• Build trusted advisor relationships with senior stakeholders.
• Present audit observations and risk assessments to executive leadership.
• Facilitate remediation discussions and control enhancement initiatives.
• Engage with Audit Committees, leadership teams, and process owners.

Project & Team Leadership

• Manage multiple concurrent engagements across industries and clients.
• Lead and mentor teams of consultants, senior consultants, and analysts.
• Review project deliverables for quality and methodological compliance.
• Manage engagement budgets, timelines, and resource allocation.
• Drive team development, coaching, and performance management.
• Support talent acquisition and capability-building initiatives.

Business Development & Practice Development

• Support proposal development, client pursuits, and market initiatives.
• Participate in RFP responses and client presentations.
• Develop audit methodologies, accelerators, templates, and risk frameworks.
• Contribute to thought leadership and practice development initiatives.
• Identify opportunities to expand client relationships and cross-sell services.

Required Qualifications

• CA / CPA / CIA / MBA / ACCA or equivalent professional qualification.
• Additional certifications such as CISA, CRISC, or ERM-related certifications are advantageous.

Experience Requirements

• 8-12 years of experience in:
• Internal Audit
• Risk Advisory
• SOX
• IFC
• Controls Assurance
• Enterprise Risk Management
• Governance, Risk & Compliance (GRC)
• Business Process Reviews
• Consulting Services
• Demonstrated experience leading large client-facing engagements.
• Experience managing cross-functional audit teams.
• Experience working with senior client stakeholders.

Preferred Skills

Business Audit & Risk

• Internal Audit
• Risk Advisory
• SOX Compliance
• IFC Reviews
• Controls Assurance
• ERM
• GRC

Process Expertise

• O2C
• P2P
• R2R
• Payroll
• Treasury
• Inventory
• Vendor Governance
• Operational Excellence

Technology Awareness

• SAP
• Oracle
• Workday
• Power BI
• Alteryx
• SQL
• ITGC Concepts
• Automated Controls

Industry Exposure

Preferred experience in:

• Banking & Financial Services
• Insurance
• Financial Services
• Manufacturing
• Consumer Products
• Retail
• Technology
• Healthcare
• Energy & Infrastructure

Core Competencies

• Internal Audit & Risk Advisory
• SOX & IFC Compliance
• Enterprise Risk Management (ERM)
• Governance, Risk & Compliance (GRC)
• Business Process Reviews
• Risk Assessment & Controls Evaluation
• Stakeholder Relationship Management
• Executive Communication & Reporting
• Team Leadership & Mentoring
• Project & Engagement Management
• Data Analytics & Insight Generation
• Strategic Problem Solving
• Quality & Risk Management
• Business Transformation & Process Improvement

Ideal Candidate Profile

A seasoned Business Audit Manager with strong expertise in Internal Audit, Risk Advisory, SOX, IFC, ERM, Controls Assurance, and Business Process Reviews, capable of leading large client engagements, managing teams, and advising senior stakeholders. The ideal candidate combines deep business risk knowledge with working awareness of technology-enabled controls, ERP environments, and digital transformation risks, enabling effective delivery of integrated business and technology audit engagements.

Level: Manager

Experience: 8-12 Years

Primary Focus: Internal Audit, Risk Advisory, SOX, IFC, ERM, GRC, Controls Assurance, and Business Process Reviews

Technology Exposure: Preferred (ITGC, ERP Controls, Data Analytics, Technology-enabled Processes)

Industry Preference: Banking & Financial Services, Insurance, Manufacturing, Consumer, Retail, Technology, Healthcare, and other regulated industries.