وظيفة مساعد ضمان الجودة الطبية شاغرة لدى SEMA Invest في الرياض

I. Position Overview

The Internal Audit Director is responsible for establishing, managing, and continuously improving the company's internal audit system. Through independent and systematic audits and risk assessments, the Director identifies potential risks in operations, finance, information systems, and internal controls, providing objective recommendations on risk and control to management and the Audit Committee.

This role requires a deep understanding of business processes, financial management, internal controls, risk management, and compliance requirements. The Director formulates annual internal audit plans, organizes risk assessments and audit projects, and tracks audit findings and the status of corrective actions.

Additionally, the Internal Audit Director drives the continuous improvement of the internal control environment, enhancing corporate governance, risk management capabilities, and operational transparency.

II. Key Responsibilities

1. Internal Audit System Development

Establish and refine the company's internal audit policies, processes, and work standards.

Formulate internal audit policies, methodologies, and operating procedures.

Establish a risk-based internal audit framework.

Continuously evaluate the effectiveness of the existing internal audit system.

Drive the standardization and digitalization of internal audit processes.

Ensure audit work complies with corporate governance principles and applicable professional standards.

2. Annual Audit Planning

Develop annual and medium-to-long-term internal audit plans.

Determine audit priorities and project rankings based on changes in corporate risk.

Adjust audit plans in light of business scale, organizational structure, and major projects.

Define audit scope, objectives, schedules, and resource requirements.

Regularly report on the execution of audit plans to senior management and the Audit Committee.

Promptly adjust audit plans in response to major risk events.

3. Risk Assessment

Establish mechanisms for identifying and assessing internal corporate risks.

Analyze risks related to finance, operations, technology, information security, and business processes.

Identify key control points and potential control deficiencies.

Conduct risk assessments on major business processes.

Determine audit scope and testing protocols based on risk levels.

Continuously monitor changes in the risk environment.

4. Internal Control Auditing

Evaluate the design and operational effectiveness of the company's internal controls.

Conduct control testing on key business processes.

Identify control deficiencies, process vulnerabilities, and potential risks.

Assess the adequacy of segregation of duties, approval mechanisms, and authorization management.

Drive business departments to improve internal control measures.

Monitor the actual effectiveness of implemented control improvements. 5. Financial and Operational Auditing

Organize and conduct finance-related internal audits.

Review processes for revenue, costs, expenses, assets, and fund management.

Evaluate control mechanisms related to financial and operational data.

Audit procurement, sales, inventory, contracting, and supplier management processes.

Conduct special audits for major business projects.

Identify issues regarding operational efficiency, resource allocation, and cost management.

6. Compliance and Governance Auditing

Review the implementation of company policies, systems, and internal processes.

Identify potential compliance risks and propose recommendations for improvement.

Evaluate corporate governance processes and management control mechanisms.

Coordinate with legal, compliance, risk management, and finance teams.

Support management in establishing an effective risk and control environment.

Conduct audit assessments regarding significant changes to policies or systems.

7. Information Systems and IT Auditing

Evaluate internal controls related to core information systems.

Review system access rights, user management, and segregation of duties.

Assess IT change management, data management, and system security controls.

Conduct risk and control testing for critical business systems.

Collaborate with IT and information security teams to identify system risks.

Continuously update the IT audit scope in line with business development.

8. Data Analysis and Audit Technology

Utilize data analysis techniques to enhance internal audit efficiency.

Develop audit data analysis models and anomaly detection mechanisms.

Analyze large volumes of transaction and business data.

Identify anomalous transactions, irregular processes, and potential risk patterns.

Drive the development of continuous auditing and continuous monitoring capabilities.

Leverage audit management and data analysis tools to improve audit quality.

9. Audit Project Management

Oversee the overall planning and execution of internal audit projects.

Define audit objectives, scope, methodology, and timelines.

Manage audit resources and project schedules.

Review audit working papers and key audit conclusions.

Ensure audit findings are supported by sufficient facts and evidence.

Ensure the timely and high-quality completion of audit projects.

10. Audit Reporting and Management Communication

Prepare internal audit reports and management reports.

Clearly articulate audit findings, risk impacts, and control deficiencies.

Propose actionable recommendations for remediation.

Report significant audit findings to senior management. Report audit results to the Audit Committee as required.

Escalate significant risk issues in a timely manner.

11. Remediation Tracking

Establish a tracking mechanism for audit findings and remediation items.

Monitor remediation plans and completion progress of business units.

Verify the actual implementation of remediation measures.

Assess whether remediation measures effectively address the underlying risks.

Manage the escalation of overdue or significant remediation items.

Report remediation status to management and the Audit Committee regularly.

12. Fraud Risk and Special Investigation Support

Participate in identifying corporate fraud risks and assessing internal controls.

Conduct special audits on anomalous transactions and significant risk issues.

Participate in internal investigation projects as authorized.

Analyze relevant business processes and control environments.

Collaborate with Legal, Compliance, and relevant management teams to handle significant matters.

Ensure objective, independent, and complete documentation throughout investigation and audit processes.

13. Cross-functional Collaboration

Collaborate with the Finance Department to assess financial and operational controls.

Collaborate with operations teams to review business processes.

Conduct system audits with IT and information security teams.

Coordinate risk and control matters with Legal and Compliance teams.

Collaborate with HR and business units to review relevant internal processes.

Provide recommendations for internal control improvements to business units.

14. Audit Team Management

Oversee the organization and day-to-day management of the internal audit team.

Define team objectives, work plans, and performance standards.

Guide Senior Internal Auditors and Internal Auditors in conducting audit work.

Review audit programs, working papers, and reports prepared by the team.

Develop team members' skills in risk identification, audit analysis, and communication.

Establish mechanisms for continuous training and professional development.

15. Audit Committee Support

Provide the Audit Committee with independent audit information and risk analysis.

Report regularly on the execution of the annual audit plan.

Report significant audit findings and remediation status.

Provide insights regarding corporate internal controls and risk management.

Assist the Audit Committee in understanding significant business risks.

Conduct special audit projects as requested by the Audit Committee.

III. Qualifications

Education Background

Bachelor’s degree or above in Auditing, Accounting, Finance, Economics, Business Management, or related fields. MBA, Master of Accounting, Master of Auditing, or related advanced degree preferred.

Holders of CIA, CPA, CISA, CFE, or other relevant professional certifications preferred.

Work Experience

18+ years of experience in internal audit, risk management, financial audit, or internal control.

Experience in managing audit teams or in senior audit management roles.

Experience auditing large enterprises, multi-regional organizations, or complex business environments.

Experience in managing risk-based internal audit projects.

Experience reporting to senior management or the audit committee.

Experience in cross-departmental internal control and process auditing.