Senior Risk & Internal Audit Manager

About the role

The Senior Risk & Internal Audit Manager will lead risk‑based internal audit engagements across UCC’s capital project portfolio and support continuous monitoring across hospitality and F&B operations. This senior individual‑contributor role requires independent operation in high‑complexity environments and direct interaction with senior project and operations leaders.

Key responsibilities

• Plan and execute risk‑based internal audits for EPC and capital projects, including JV‑structured initiatives, following the IIA International Professional Practices Framework (IPPF).
• Assess project controls covering cost, schedule, claims, variation orders, subcontractor management, and contract compliance.
• Conduct internal audits and control reviews for hospitality/F&B operations, identifying operational, financial, and compliance risks.
• Design, implement and maintain continuous monitoring frameworks with KPI, KCI and KRI indicators and RAG‑based thresholds.
• Develop and execute Risk Control Matrices, distinguishing design effectiveness from operating effectiveness.
• Draft clear, actionable audit findings, manage the full finding lifecycle, and ensure remediation closure.
• Engage with auditee management—including project directors, finance teams, and operations leadership—to validate findings and agree corrective actions.
• Contribute to annual risk‑based audit planning and support Audit Committee reporting with KPI/KCI/KRI summaries.
• Mentor junior audit staff and help build internal audit capability across the function.

Required profile

• Bachelor’s degree in Accounting, Finance, Engineering or a related field; professional certification preferred (CIA, CPA, CFE or equivalent).
• 10‑12 years of progressive internal audit, risk or assurance experience, with depth in capital projects/EPC, hospitality/F&B, and continuous monitoring frameworks.
• Strong understanding of JV governance structures and large‑scale project risk (claims, variations, contractor performance).
• Excellent report writing and stakeholder communication skills, with the ability to engage senior leadership.
• Willingness to be based in or relocate to Doha, Qatar.

Required skills

• Risk‑based internal audit methodology
• Continuous monitoring and continuous auditing frameworks
• KPI, KCI and KRI design with RAG thresholds
• Risk Control Matrix development (design and operating effectiveness)
• Familiarity with IIA International Professional Practices Framework (IPPF)
• Project controls assessment (cost, schedule, claims, variations)
• JV governance and large‑scale project risk management