Chief Internal Auditor

The mandate

The Chief Internal Auditor will lead an independent assurance function through a shift from cyclical process coverage to risk-led, outcome-focused work. The appointment must protect direct committee access, strengthen evidence and create a clear view of assurance gaps without becoming an additional management-control layer.

This permanent role owns charter, strategy, universe, plan, methodology, people, budget, quality and communication. It will integrate financial, operational, technology, conduct and change assurance while deciding where specialist capability should be built, borrowed or independently procured.

Functional accountability sits with the Audit Committee, including approval of plan, budget, appointment, performance and removal. The Chief may access records and people within the charter, determine ratings and escalate restrictions. Management owns risk, control and remediation and cannot delegate them to internal audit.

The first-year arc includes independence reset, enterprise assurance mapping, dynamic planning, priority audits, issue validation and external quality readiness. Success will be measured by the consequence and credibility of assurance, timely action on root causes and a stronger internal leadership bench.

What you will own

• Refresh the internal-audit charter, functional reporting and unrestricted-access provisions for committee approval.
• Reconstruct the risk universe and assurance map around strategic outcomes, change, dependencies and control confidence.
• Present a dynamic audit plan with explicit rationale, specialist needs, contingency capacity and displacement rules.
• Approve scopes, evidence conclusions, ratings and final reports independently of management preference.
• Establish issue validation based on sustained risk reduction, with clear escalation for extensions and recurrence.
• Implement a quality programme aligned to applicable internal-audit standards and external assessment readiness.
• Build committee reporting that explains assurance, limitations, emerging risk and management disagreement concisely.
• Develop successors across enterprise, regional and specialist audit leadership roles.

Candidate qualifications

• At least 20 years in internal audit, external audit or assurance, including five years as Chief Audit Executive or deputy.
• Active Mexican public-accountant credential, CPA, ACA, ACCA or equivalent recognised audit qualification, supported by CIA standing.
• Evidence of protecting scope, rating or access when executive interests conflicted with independent assurance.
• Broad mastery of audit strategy, risk assessment, evidence, technology, issue validation, quality and committee governance.
• A case where assurance mapping changed coverage because existing providers did not address the board's actual concern.
• Experience building diverse specialist capability and using co-source support without surrendering methodology or judgement.
• A leadership record demonstrating retention, succession, candid reporting and measurable audit-quality improvement.

Working terms and boundaries

• This is an ongoing appointment, with first-year reviews after charter approval, assurance mapping, plan refresh and quality assessment.
• Functional independence requires Committee authority over plan, budget and performance; administrative reporting cannot weaken it.
• Hybrid attendance is driven by committee work, priority audits, leadership calibration and scheduled travel.
• Internal audit cannot design controls, make operating decisions or close issues solely on management representation.
• Year-one completion requires an approved charter, risk-led plan, completed priority assurance and credible external-quality readiness.

Application

Applications for this mandate are received in one way only: through the India Board Terminal's application process. It is automated end to end. Your Executive Passport travels to the mandate holder in its confidential form, your answers to the three questions below are read before anything else in your file, and every stage that follows is recorded on your applications page.

There is no address to write to and no intermediary to call. The mandate holder reads what the Terminal delivers and nothing else, which is what keeps the process the same for every applicant and keeps your name out of it until you release it. Applications close on 5 October 2026. Mandate reference AUD-PER-2026-MEX-42.