capital.com
Group Head of Internal Audit
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
About Us
We are a leading trading platform that is ambitiously expanding to the four corners of the globe. Our top-rated products have won prestigious industry awards for their cutting-edge technology and seamless client experience. We deliver only the best, so we are always in search of the best people to join our ever-growing talented team.
About the Role
Lead and own the Group Internal Audit function for Capital.com, providing independent, risk-based assurance across all regulated entities, business lines, and geographic markets. The Group Head of Internal Audit is responsible for setting the strategic direction of the audit function, designing and operating a hybrid audit framework, and providing the Group Board, Audit Committee, and senior leadership with timely, credible assurance on the adequacy and effectiveness of governance, risk management, and internal controls across the group.
The role has an unconditional duty to escalate material control failures, significant audit findings, and regulatory concerns directly to the Group Audit Committee, independent of any instruction from executive management or any group function.
The role operates at the intersection of group governance and local regulatory accountability, requiring both strategic thinking and deep knowledge of multi-jurisdictional financial services regulation. The postholder works in close coordination with the Global Head of Compliance and other key stakeholders to ensure alignment between audit and compliance risk assessments, while maintaining the independence required of an effective third-line function.
Responsibilities
Strategic Leadership
- Develop and own the multi-year internal audit strategy aligned to group growth plans, regulatory expectations across all six entities, and the evolving risk landscape of a digital CFD and trading business.
- Build and lead a high-performing, independent internal audit function capable of providing credible assurance across a complex, multi-jurisdictional group.
- Act as a trusted adviser to the Group Board, Audit Committee, and CEO on control environment quality, emerging risks, and regulatory developments with audit implications.
Audit Planning and Delivery
- Develop, maintain, and execute the annual group audit plan, covering all entities, material business processes, technology infrastructure, regulated activities, and outsourced functions.
- Lead and oversee audit fieldwork and reporting across operations, trading systems, technology and cyber, AML/KYC, financial crime, market abuse surveillance, conduct risk, Consumer Duty (UK), product governance, third-party and outsourcing arrangements, model risk, and financial controls.
- Assess the adequacy and effectiveness of internal controls, identify control weaknesses and gaps, and provide actionable, proportionate recommendations.
- Ensure audit reports are clear, accurate, evidence-based, and issued within agreed timescales.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Issue Management and Follow-Up
- Maintain a group-wide audit issue log, tracking the status of all open findings across entities, escalating overdue or high-risk items to the Audit Committee as appropriate.
- Challenge and validate management remediation responses and closure evidence to ensure issues are genuinely resolved rather than administratively closed.
Regulatory and Governance Alignment
- Ensure the audit programme addresses the regulatory expectations of all relevant regulators: FCA (UK), CySEC (Cyprus), ASIC (Australia), SCB (Bahamas), SCA (UAE), and CNMV (Spain).
- Provide independent assurance on material business change programmes, new product launches, strategic outsourcing decisions, and regulatory change implementation across the group.
- Liaise constructively with external auditors and regulators, coordinating audit coverage where appropriate and providing regulators with access to audit documentation as required.
Requirements
- Significant internal audit leadership experience within a multi-jurisdictional financial services group, broker, or investment firm — ideally including FCA-regulated and CySEC-regulated entities.
- Strong working knowledge of FCA requirements for investment firms (MIFIDPRU, SYSC, COBS, PROD, DISP, AML/CTF, Consumer Duty) and familiarity with CySEC, ASIC, and other regulatory frameworks relevant to Capital.com's operational footprint.
- Proven experience designing and operating a hybrid or co-sourced internal audit model at group level, including methodology ownership, panel governance, and quality assurance of specialist providers.
- Experience auditing trading platforms, CFD or derivative products, technology infrastructure, financial crime controls, AML/KYC processes, and outsourced services.
- Demonstrated ability to build and sustain productive relationships with Boards, Audit Committees, and senior management while maintaining audit independence.
- Track record of preparing clear, compelling assurance opinions and presenting findings at Board and Audit Committee level.
- Experience managing or developing an internal audit team across multiple locations or entities.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Qualifications
- Professional audit qualification (CIA, ACCA, ACA, CISA, CPA or equivalent) — CIA strongly preferred.
- IIA membership or equivalent professional body membership.
- Strong knowledge of the IIA International Professional Practices Framework (IPPF) and its application in a multi-jurisdiction financial services context.
- Familiarity with UK SMCR and equivalent senior manager/controlled function regimes across relevant jurisdictions.
What You Will Get in Return
- Competitive Salary: We believe great work deserves great pay! Your skills and talents will be rewarded with a salary that makes you feel valued and motivated.
- Work-Life Harmony: Join a company that genuinely cares about you - because your life outside of work matters just as much as your time on the clock. #LI-Hybrid
- Generous Time Off: Need a breather? Our annual leave policy lets you recharge and enjoy life outside of work without a worry.
- Employee Referral Program: Love working here? Share the love! Bring your talented friends on board and get rewarded for growing our awesome team.
- Comprehensive Health & Pension Benefits: From medical insurance to pension plans, we’ve got your back. Plus, location-specific benefits and perks!
- Workation Wonderland: Live your digital nomad dreams with 30 extra days to work remotely from anywhere in the world (some restrictions apply). Adventure awaits!
- Volunteer Days: Make a difference! Take two additional paid days each year to support causes you care about and give back to the community.
Be a key player at the forefront of the digital assets movement, propelling your career to new heights! Join a dynamic and rapidly expanding company that values and rewards talent, initiative, and creativity. Work alongside one of the most brilliant teams in the industry.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Location