Internal Auditor

**Company Description**

We are looking for an **Internal Auditor** to join our team of around 1,700 people worldwide to help us power up the traveller's journey for millions of holidaymakers.

If you are passionate about risk management and controls, and skilled at identifying process improvements, assessing cybersecurity risks or ensuring compliance in a fast-paced environment, keep on reading, as you might be the perfect fit for this job.

**The job in brief**:
Job Title - Internal Auditor

Working model - remote from Spain

Team - you will join the Internal Audit Team

Level - Professional, reporting to the Head of Internal Audit

Location - Madrid, Spain

Contract - Permanent, full time (36 h/week)

Travel time required - mínimal, based on audit engagements part of the approved Internal Audit Plan

**What your impact will be**:

- Assist the Head of Internal Audit in planning and executing the approved risk-based annual audit plan;
- Assist the Head of Internal Audit in preparing ad-hoc presentations and drafting meeting minutes related to the Audit Committee;
- Lead and independently execute end-to-end internal audit engagements, ensuring timely and high-quality delivery;
- Coordinate and oversee external consultants, if engaged, in the execution of internal audit engagements, to ensure alignment with internal audit methodologies and objectives;
- Develop a deep understanding of business processes within the audit scope, identifying key risks and controls;
- Conduct kick-off meetings with auditees to clearly communicate the audit scope, objectives, and key steps of the audit process;
- Obtain, analyse and evaluate audit evidence, ensuring that audit findings are supported by well-documented conclusions;
- Identify and communicate audit findings identified, proposing practical and value-added recommendations to address control weaknesses and/or process improvements;
- Prepare formal audit reports to effectively communicate findings and recommendations emerged during the audit activities conducted;
- Lead closing meetings with auditees at the end of fieldwork activities, providing clear, constructive feedback on audit findings and recommendations;
- Monitor and assess the implementation status of audit recommendations, ensuring that agreed-upon corrective actions are effectively executed within the defined timeline;
- Support the continuous improvement of the Internal Audit function, contributing to risk assessments and control evaluations that enhance governance, risk management, and internal controls;
- Develop and maintain effective and professional working relationships with all levels of management within the organization;
- Assist in ad-hoc projects and special investigations, as required by senior management or regulatory bodies.

**Qualifications** Your expertise**:

- Experience: 2-4 years of experience in either **IT/Cybersecurity audit** or **Internal Controls audit**.
- Preferred working experience:

- _ IT & Cybersecurity Focus_: Experience in IT audits, cybersecurity risks, IT general controls (ITGCs) and data protection. Familiarity with frameworks such as NIST, COBIT and CIS Controls is a plus.
- _ Internal Controls Focus_: Strong knowledge of internal control frameworks (e.g., COSO, SOX compliance, risk-based auditing, process and financial controls).
- Education background: Bachelor's or Master's degree in Finance, Business Administration, Information Systems Engineering or a related field.
- Language skills:

- English (mandatory): Excellent written and spoken language skills.
- Other languages: appreciated but not required.

**Additional Information** Perks of working with us**:
How we work together:

- An inclusive, friendly, and international environment (you’ll be working with colleagues from +10 countries and over 48 nationalities)
- Shorter working week (36h as full time), with a half working day on Fridays
- Flexible start and end of the working day
- Possibility to work from anywhere for a period of time per year defined according to local regulations

How we learn together:

- Fri-Yays: half a day on Friday morning with a no-meeting mandate and dedicated to deep work, personal growth, learning and training and/or focus time.
- Professional and managerial skills development training paths, access to e-learning platforms such as O’reilly, Udemy, Coursera (depending on the department), and to our internal platform offering bespoke training content

Other perks:

- 2 paid days off per year for volunteering purposes
- Occasional social events to foster connections among colleagues
- Travel industry discounts and flash exclusive staff fares
- We support our employees through life's significant moments with leave options (e.g parental responsibilities, marriages, bereavements, relocations, etc.) in line with local laws.

Wish you were here? We do, too

**Selection process steps**:

- HR interview (10-30 minutes)
- 1st interview (Manager): soft skills + technical knowledge (test cas