Group Head of Internal Audit

We are a leading trading platform that is ambitiously expanding to the four corners of the globe. Our top-rated products have won prestigious industry awards for their cutting-edge technology and seamless client experience. We deliver only the best, so we are always in search of the best people to join our ever-growing talented team.

Strategic Leadership Develop and own the multi-year internal audit strategy aligned to group growth plans, regulatory expectations across all six entities, and the evolving risk landscape of a digital CFD and trading business. Build and lead a high-performing, independent internal audit function capable of providing credible assurance across a complex, multi-jurisdictional group. Act as a trusted adviser to the Group Board, Audit Committee, and CEO on control environment quality, emerging risks, and regulatory developments with audit implications. Audit Planning and Delivery Develop, maintain, and execute the annual group audit plan, covering all entities, material business processes, technology infrastructure, regulated activities, and outsourced functions. Lead and oversee audit fieldwork and reporting across operations, trading systems, technology and cyber, AML/KYC, financial crime, market abuse surveillance, conduct risk, Consumer Duty (UK), product governance, third-party and outsourcing arrangements, model risk, and financial controls. Assess the adequacy and effectiveness of internal controls, identify control weaknesses and gaps, and provide actionable, proportionate recommendations. Ensure audit reports are clear, accurate, evidence-based, and issued within agreed timescales. Issue Management and Follow-Up Maintain a group-wide audit issue log, tracking the status of all open findings across entities, escalating overdue or high-risk items to the Audit Committee as appropriate. Challenge and validate management remediation responses and closure evidence to ensure issues are genuinely resolved rather than administratively closed. Regulatory and Governance Alignment Ensure the audit programme addresses the regulatory expectations of all relevant regulators: FCA (UK), CySEC (Cyprus), ASIC (Australia), SCB (Bahamas), SCA (UAE), and CNMV (Spain). Provide independent assurance on material business change programmes, new product launches, strategic outsourcing decisions, and regulatory change implementation across the group. Liaise constructively with external auditors and regulators, coordinating audit coverage where appropriate and providing regulators with access to audit documentation as required.

Significant internal audit leadership experience within a multi-jurisdictional financial services group, broker, or investment firm — ideally including FCA-regulated and CySEC-regulated entities. Strong working knowledge of FCA requirements for investment firms (MIFIDPRU, SYSC, COBS, PROD, DISP, AML/CTF, Consumer Duty) and familiarity with CySEC, ASIC, and other regulatory frameworks relevant to Capital.com's operational footprint. Proven experience designing and operating a hybrid or co-sourced internal audit model at group level, including methodology ownership, panel governance, and quality assurance of specialist providers. Experience auditing trading platforms, CFD or derivative products, technology infrastructure, financial crime controls, AML/KYC processes, and outsourced services. Demonstrated ability to build and sustain productive relationships with Boards, Audit Committees, and senior management while maintaining audit independence. Track record of preparing clear, compelling assurance opinions and presenting findings at Board and Audit Committee level. Experience managing or developing an internal audit team across multiple locations or entities. Qualifications Professional audit qualification (CIA, ACCA, ACA, CISA, CPA or equivalent) — CIA strongly preferred. IIA membership or equivalent professional body membership. Strong knowledge of the IIA International Professional Practices Framework (IPPF) and its application in a multi-jurisdiction financial services context. Familiarity with UK SMCR and equivalent senior manager/controlled function regimes across relevant jurisdictions.

laptop-ats-crawler v3