Global Head of Data and Automated Controls Audit

The mandate

The Global Head will lead independent assurance over data governance and automated controls without exposing the organisation's technology environment in public material. The portfolio must examine how data meaning, lineage, access, change and automated decision logic support financial, operational and compliance outcomes, while recognising where manual governance remains decisive.

This permanent position owns the specialist universe, audit strategy, evidence standards, talent and committee reporting. It must integrate audit of governance with technical testing and distinguish a control that is automated from one whose design, parameters, source data or exception response still depends on accountable human action.

The Global Head may approve specialist scopes, require secure evidence, determine ratings and halt unsafe testing. Data and technology management retain control design, production access and remediation. Internal audit will not configure rules, certify management data or operate exception monitoring.

The first year will deliver a governed universe, two end-to-end data audits, two automated-control themes and a specialist quality programme. Success means issues are linked to root causes and decision consequence, audit evidence becomes reproducible and scarce capability is developed rather than permanently borrowed.

What you will own

• Construct an auditable universe spanning data ownership, quality, lineage, access, retention, change, models and automated controls.
• Prioritise coverage using decision consequence, data criticality, autonomy, complexity, change velocity and assurance confidence.
• Define evidence standards for source completeness, transformation, configuration, parameters, access and exception handling.
• Lead two end-to-end audits tracing selected data from accountable definition through use and reported outcome.
• Examine automated controls across initiation, rule logic, change approval, failure response and manual override.
• Establish safe technical-testing protocols, reviewer reproducibility and secure retention of sensitive evidence.
• Validate high-risk remediation through controlled retest and evidence of sustained exception management.
• Develop audit leaders across data, automation, analytics and governance with credible succession depth.

Candidate qualifications

• At least 17 years in data, technology, financial-control or internal audit, including global specialist leadership.
• Active Luxembourg-approved auditor, CPA, ACA, ACCA or equivalent audit qualification, supported by CISA, CIA or data-governance certification.
• Evidence of an audit where correct automated logic still failed because source data or exception response was weak.
• Deep knowledge of ownership, lineage, quality, access, retention, change, automated rules and override governance.
• A case where you stopped technical testing because authorisation or production risk was no longer acceptable.
• Experience explaining complex data evidence to audit committees without naming systems or overstating certainty.
• A record of developing specialist auditors and reducing dependence on external expertise.

Working terms and boundaries

• This continuing role has first-year gates after universe approval, each audit theme, quality review and succession assessment.
• Audit scope, evidence and rating are included; data ownership, control design, production changes and monitoring are excluded.
• Hybrid presence is aligned to secure fieldwork, specialist calibration and committee reporting, with planned travel.
• Automated-control testing must remain within authorised safe methods and may never alter production evidence.
• Year-one completion requires four concluded themes, validated remediation, reproducible files and a sustainable specialist bench.

Application

Applications for this mandate are received in one way only: through the India Board Terminal's application process. It is automated end to end. Your Executive Passport travels to the mandate holder in its confidential form, your answers to the three questions below are read before anything else in your file, and every stage that follows is recorded on your applications page.

There is no address to write to and no intermediary to call. The mandate holder reads what the Terminal delivers and nothing else, which is what keeps the process the same for every applicant and keeps your name out of it until you release it. Applications close on 5 October 2026. Mandate reference AUD-PER-2026-LUX-50.