Internal Controls and Assurance Manager (m/f/d)

In this role, you will help stand up and shape a new Internal Controls & Assurance function, acting as the principal hands-on assurance expert across finance, technology, and operations. You will test control design and operating effectiveness, document gaps, and drive remediation with process owners. You’ll leverage GRC tools (AuditBoard/Optro) to standardise testing and reporting, contributing to reliable management dashboards. This is an opportunity to directly influence risk management in a fast-growing healthcare/e‑commerce environment and partner with cross-functional teams to embed sound controls.

• Work from Home up to 20 days/year
• Kindergarten Grant: 100 EUR/month
• Mental health support via nilo
• Personal development through training
• Deutschland Ticket mobility benefit
• Urban Sports Club membership

• Execute risk-based control assessments across multiple functions (Finance, Technology, HR, Operations, Pharmacy, Compliance) including design and operating effectiveness
• Conduct process walkthroughs with control owners to understand risks, control objectives, and evidence
• Evaluate control design adequacy and document gaps with recommendations
• Test operating effectiveness using appropriate samples and maintain traceable working papers
• Identify deficiencies, assign severity, and coordinate remediation actions with first-line owners
• Maintain and develop Risk and Control Matrices; support risk-to-control mapping with ERM
• Advise on practical control design, ownership, frequency, and evidence requirements
• Maintain data in AuditBoard/Optro and support dashboards and assurance reporting
• Support framework rollout into new domains and train control owners to drive standardisation or automation

• Several years of hands-on experience in internal controls, assurance, internal audit, SOX/ICFR or equivalent
• Experience performing walkthroughs, assessing design and testing operating effectiveness
• Strong skills in sampling, evidence evaluation, and producing clear working papers
• Experience identifying control deficiencies and discussing remediation with process owners
• Working knowledge of Risk and Control Matrices and internal-control frameworks (COSO, SOX)
• Experience across Finance, IT, HR, Operations, Compliance or Supply Chain
• Confidence to challenge managers and senior process owners
• Experience with AuditBoard/Optro or another GRC platform; professional qualification (CIA, CPA, ACCA, CISA) is a plus
• Experience in listed, regulated, or international organisations; exposure to healthcare/pharmacy/e‑commerce/tech is a plus
• Fluent in English; German is a plus

• Analytical mindset
• Strong communication and influencing skills
• Proactive problem-solving
• AuditBoard/Optro
• COSO/ICFR framework
• Risk and Control Matrices