Group Head of Internal Audit

We are a leading trading platform that is ambitiously expanding to the four corners of the globe. Our top-rated products have won prestigious industry awards for their cutting-edge technology and seamless client experience. We deliver only the best, so we are always in search of the best people to join our ever-growing talented team.

Responsabilities

Strategic Leadership

-

Develop and own the multi-year internal audit strategy aligned to group growth plans, regulatory expectations across all six entities, and the evolving risk landscape of a digital CFD and trading business.

-

Build and lead a high-performing, independent internal audit function capable of providing credible assurance across a complex, multi-jurisdictional group.

-

Act as a trusted adviser to the Group Board, Audit Committee, and CEO on control environment quality, emerging risks, and regulatory developments with audit implications.

Audit Planning and Delivery

-

Develop, maintain, and execute the annual group audit plan, covering all entities, material business processes, technology infrastructure, regulated activities, and outsourced functions.

-

Lead and oversee audit fieldwork and reporting across operations, trading systems, technology and cyber, AML/KYC, financial crime, market abuse surveillance, conduct risk, Consumer Duty (UK), product governance, third-party and outsourcing arrangements, model risk, and financial controls.

-

Assess the adequacy and effectiveness of internal controls, identify control weaknesses and gaps, and provide actionable, proportionate recommendations.

-

Ensure audit reports are clear, accurate, evidence-based, and issued within agreed timescales.

Issue Management and Follow-Up

• -
• Maintain a group-wide audit issue log, tracking the status of all open findings across entities, escalating overdue or high-risk items to the Audit Committee as appropriate.
• -
• Challenge and validate management remediation responses and closure evidence to ensure issues are genuinely resolved rather than administratively closed.

Regulatory and Governance Alignment

• -
• Ensure the audit programme addresses the regulatory expectations of all relevant regulators: FCA (UK), CySEC (Cyprus), ASIC (Australia), SCB (Bahamas), SCA (UAE), and CNMV (Spain).
• -
• Provide independent assurance on material business change programmes, new product launches, strategic outsourcing decisions, and regulatory change implementation across the group.
• -
• Liaise constructively with external auditors and regulators, coordinating audit coverage where appropriate and providing regulators with access to audit documentation as required.

Requirements

-

Significant internal audit leadership experience within a multi-jurisdictional financial services group, broker, or investment firm — ideally including FCA-regulated and CySEC-regulated entities.

-

Strong working knowledge of FCA requirements for investment firms (MIFIDPRU, SYSC, COBS, PROD, DISP, AML/CTF, Consumer Duty) and familiarity with CySEC, ASIC, and other regulatory frameworks relevant to Capital.com's operational footprint.

-

Proven experience designing and operating a hybrid or co-sourced internal audit model at group level, including methodology ownership, panel governance, and quality assurance of specialist providers.

-

Experience auditing trading platforms, CFD or derivative products, technology infrastructure, financial crime controls, AML/KYC processes, and outsourced services.

-

Demonstrated ability to build and sustain productive relationships with Boards, Audit Committees, and senior management while maintaining audit independence.

-

Track record of preparing clear, compelling assurance opinions and presenting findings at Board and Audit Committee level.

-

Experience managing or developing an internal audit team across multiple locations or entities.

Qualifications

• -
• Professional audit qualification (CIA, ACCA, ACA, CISA, CPA or equivalent) — CIA strongly preferred.
• -
• IIA membership or equivalent professional body membership.
• -
• Strong knowledge of the IIA International Professional Practices Framework (IPPF) and its application in a multi-jurisdiction financial services context.
• -
• Familiarity with UK SMCR and equivalent senior manager/controlled function regimes across relevant jurisdictions.