Internal Audit Manager

Designation :Manager – Internal Audit Function: Internal Audit & Risk Location: Decorpot HQ, Bengaluru Role Overview Key Responsibilities A. Internal Audit Plan & Execution • Build and execute the annual risk-based internal audit plan, covering all group entities, all ECs, the factory, FurnitureOne stores, and key corporate processes. • Lead end-to-end audits — planning, fieldwork, sampling, walkthroughs, testing, exception logging, root-cause analysis, and reporting. • Produce CFO-grade audit reports with clear findings, risk ratings, and time-bound management action points. • Track closure of audit findings; escalate ageing items to the CEO and Audit Committee. B. Process & Control Reviews • Procure-to-Pay: vendor onboarding, bank account change controls, PO discipline, three-way match, payment release controls (including HDFC Snorkel integration). • Order-to-Cash: customer onboarding, milestone billing, advance liability mapping, refunds, write-offs, CP commission integrity, and channel-partner controls. • Hire-to-Retire: payroll, full-and-final, reimbursements (Keka), incentive payouts, statutory deductions. • Factory / Inventory: BOM accuracy, GRN-vs-PO, scrap / yield, physical verification, stock valuation, fixed asset register. • EC operations: cash collection (where applicable), site visit logging, design-cost discipline, and customer-facing controls. • IT general controls: access reviews, segregation of duties in ERP, change management, master data integrity. C. Forensic & Special Investigations • Lead forensic investigations on suspected fraud, vendor / CP collusion, payment anomalies, and revenue leakage. • Run analytics-led continuous monitoring on payments, GST input claims, vendor master changes, and CP commission patterns. • Present findings to the CEO and Audit Committee with documented evidence. D. Policy, Risk & Compliance Framework • Co-own the policy stack with AGM – Finance — procurement, vendor management, petty cash, reimbursement, capex, treasury, IT, code of conduct. • Maintain a live group risk register; refresh quarterly. • Coordinate with statutory auditors, tax consultants, and external IA firms for assurance work; avoid duplication of effort. E. Audit Committee Engagement • Prepare quarterly Audit Committee material — IA plan progress, findings, ageing of open items, risk register updates. • Attend Audit Committee meetings; present IA reports directly. • Manage the whistleblower / ethics hotline process and report material matters to the Committee. First 90 Days – Specific Deliverables • Publish the FY27 risk-based internal audit plan, approved by the CEO and the Audit Committee. • Complete the first two audits — recommended: Procure-to-Pay (Decorpot HO) and Factory Inventory / BOM (Ekaansh). • Refresh the group policy stack (procurement, vendor onboarding, petty cash, reimbursement). • Stand up a quarterly Audit Committee reporting format. • Build the analytics-led continuous monitoring rules for high-risk payments and vendor master changes. Qualifications & Experience • Chartered Accountant (CA) — mandatory. CIA (Certified Internal Auditor) is a plus. • 2–5 years of post-qualification experience (PQE). • At least 2 years in Internal Audit / Risk Advisory at a Big 4 (Deloitte, EY, KPMG, PwC) or top-tier IA firm (Grant Thornton, BDO, Protiviti, Mazars) — preferred. • Strong preference for candidates with manufacturing / retail / multi-site exposure. • Experience leading audits independently and presenting to senior management / Audit Committees. Skills & Competencies • Sharp process and controls mindset — ability to dismantle a process into risks, controls, and tests. • Strong data analytics skills — advanced Excel, SQL or similar, audit analytics tools (ACL / IDEA / equivalent). Comfort with AI-led audit automation is a strong plus. • Excellent written communication — audit reports must be precise, evidence-backed, and actionable. • Independence, integrity, and the spine to disagree with senior business leaders when controls demand it.