Director, Internal Controls & Assurance

Job Description

About the role

We are looking for a Director, Internal Controls & Assurance to establish and lead our newly created Internal Controls & Assurance (IC&A) function.

This is a rare opportunity to build a company-wide function from the ground up at a fast-growing, listed European e-commerce and healthcare company. Reporting to our Chief Audit Executive, you will own the enterprise Internal Control Framework, its methodology and governance model, and the annual assurance cycle across financial, operational, technology, compliance and reporting domains.

As a second-line leader, you will set the standards, challenge control design and remediation, and give Management documented, evidence-based assurance over whether key controls are designed appropriately and operating effectively. Your work will directly support the Managing Board's annual assessment of the control environment. You will have a high degree of autonomy, work with leading GRC software (AuditBoard/Optro), and lead and develop a small team that is set to grow.
 

About your tasks:

Build & Lead the IC&A Function

• Establish and lead Redcare Pharmacy's Internal Controls & Assurance function, including its mandate, governance, operating model, annual priorities and team capabilities.
• Develop and lead the IC&A team, decide when specialist or co-sourced expertise is needed, and continuously improve the scalability, automation and quality of the assurance process.

Framework & Methodology

• Own and maintain the enterprise Internal Control Framework, ensuring one consistent methodology connects risks, processes, controls, evidence and assurance across the company.
• Define and approve the control taxonomy, minimum evidence standards, design-assessment criteria, operating-effectiveness testing methodology, sampling principles and deficiency-rating framework.
• Together with Enterprise Risk Management, oversee risk-to-control mapping and drive the framework's expansion into Finance, Technology, HR, Operations, Pharmacy, Quality, Compliance, Privacy, Security, Sustainability and other business areas.

Assurance & Challenge

• Set the annual assurance scope and assessment plan based on risk, maturity, regulatory requirements and Management priorities.
• Review and approve significant control-design conclusions and deficiency judgements, so that assessments are consistent and well supported.
• Challenge Directors, senior leaders and executives where control design, evidence, ownership or remediation falls short, and resolve significant disagreements over ratings and corrective actions.

Reporting & Stakeholder Management

• Own Management reporting on the control environment, including dashboards, deficiency reporting and the annual Management Assurance Report to the Managing Board.
• Lead senior engagement with business leadership, control coordinators, Enterprise Risk Management, Internal Audit and External Audit, while keeping first-, second- and third-line responsibilities clear.

Qualifications

• Substantial experience in internal controls, risk assurance, internal audit, SOX/ICFR or a comparable control-assurance environment, including ownership or leadership of an enterprise control framework.
• Proven track record of establishing, transforming or significantly maturing an Internal Control Framework across multiple business domains, not only Finance.
• Advanced practical knowledge of control design, walkthroughs, operating-effectiveness testing, evidence evaluation, deficiency assessment and remediation governance.
• Sound judgement in evaluating significant deficiencies and the confidence to challenge senior executives.
• Strong understanding of the Three Lines Model.
• Strong leadership and communication skills, including people management and clear written reporting for executive and Board-level audiences.
• Experience in a listed, regulated, international or similarly complex environment.
• CIA certification preferred; CPA, ACCA, CISA or equivalent are also welcome.
• Familiarity with COSO/SOX, experience working with External Audit, and hands-on use of GRC platforms such as AuditBoard/Optro, ideally including AI-supported ways of working, are a strong plus.
• Experience in healthcare, pharmacy, e-commerce, logistics or another technology- and data-intensive environment is a plus.
• Fluent in English; German is a plus.

This role can be based in either our Cologne or Sevenum office. Whichever you choose will be your primary location with regular (weekly) on-site presence; occasional (bi-weekly - monthly) visits to the other office are also part of the role.

Additional Information

About your Benefits:

In order to provide our employees with the best possible support for their individual needs, we offer a wide range of benefits:

• Work from Home: If your job does not require you to be present in the office, we can arrange the place you work from individually - even for up to 20 days a year anywhere in the EU.
• Redcare events: We promote teambuilding through creative team events, and celebrate our successes together at regularly scheduled parties.
• Kindergarten Grant: We offer our employees who pay for childcare in kindergarten 100,00 € (total) per month.
• Mental health: Get quick professional help from psychologists from nilo if you feel overwhelmed in your personal or professional life. Anonymously and free of charge.
• Personal Development: We are all constantly learning. That's why we support and foster your career development through internal & external training and help you grow.
• Mobility: Your commute matters to us. We provide our employees with a fully costed Deutschland Ticket which can be used at any time.
• Sports & Health: Your well-being is our top priority. Therefore, we offer you a range of opportunities to improve your health. Profit from a membership (M) package at Urban Sports Club, providing a variety of sports offers tailored to your interests.

Compensation Grade: Grade 17