About the Role
Flip Group is looking for an Internal Audit to build our Internal Audit function from the ground up across our payment system and multi-finance businesses.
You will work closely with senior leaders across Risk, Compliance, Legal, Finance, Product, Operations, and Technology, while maintaining the independence and professional skepticism expected from an internal audit function. The role is ideal for an audit leader who is comfortable operating hands-on in a fast-moving fintech environment and can gradually scale a durable audit capability for a regulated financial services group.
What you'll do
- Develop and maintain a group-wide risk-based audit universe and annual audit plan covering payment system, multi-finance, financial reporting, operations, technology, information security, data, compliance, and third-party / partner risks.
- Lead end-to-end internal audit engagements, including planning, walkthroughs, control testing, root-cause analysis, report writing, stakeholder alignment, and follow-up on management actions.
- Assess the design and operating effectiveness of key controls across business processes, technology platforms, finance operations, regulatory compliance, and governance processes.
- Provide independent assurance over regulatory and compliance areas relevant to Flip Group, including BI and OJK requirements, AML/CFT, KYC, consumer protection, data privacy, outsourcing, and other applicable financial services obligations.
- Identify control gaps, process inefficiencies, emerging risks, and governance weaknesses, then translate findings into practical, risk-based recommendations that teams can implement.
- Build a disciplined issue management process to track remediation actions, validate closure, and escalate overdue or high-risk findings appropriately.
- Support regulatory examinations, external audits, due diligence requests, and management reviews by providing audit insights, control documentation, and evidence where appropriate.
What you'll need
- 7+ years of relevant experience in internal audit, external audit, risk assurance, technology audit, or regulatory audit, with meaningful exposure to financial services, fintech, banking, payments, lending, or multi-finance.
- Hands-on experience building or maturing audit programs, audit methodology, risk-based audit planning, control testing, audit reporting, and issue follow-up processes.
- Strong understanding of internal control and risk management frameworks such as COSO, COBIT, ISO 27001, or other relevant assurance frameworks.
- Working knowledge of Indonesian financial services regulatory expectations, especially BI and OJK requirements applicable to payment systems, lending / multi-finance, AML/CFT, KYC, consumer protection, technology risk, and outsourcing.
- Ability to audit both business and technology processes, including product flows, transaction operations, reconciliation, access management, change management, incident management, information security, data integrity, and third-party integrations.
- Strong business judgment, professional skepticism, and the ability to distinguish high-risk issues from process noise.
- Excellent written and verbal communication skills, with the ability to write clear audit reports and influence senior stakeholders without relying on authority.
Additional Preferred Qualifications
- Professional certification such as CIA, CISA, CPA, CA, CRMA, or an equivalent audit / risk qualification is highly preferred; candidates with strong relevant experience and a clear certification pathway may also be considered.
- Experience with data-driven audit techniques, SQL / BI tools, audit management tools, or continuous monitoring.
- Experience in a regulated startup or high-growth financial technology company.