Internal Controls & Compliance Lead

Bosta; Cassowary Coast Regional; On-site; AUD 120,000 - 180,000; Full time

Job summary

Bosta, a fast-growing logistics technology company, is seeking an experienced Senior Internal Auditor to strengthen its internal controls, risk management, and compliance framework. You will design and implement enterprise-wide controls, map processes, and coordinate with external auditors.

Based in Australia, you will ensure IFRS, COSO, and local regulations are embedded in finance and operations, lead control testing, and drive automation with IT and ERP partners to reduce risk and increase

Qualifications

• 7–10 years in internal audit, internal controls, or risk & compliance
• Senior/lead experience in a Big 4 or equivalent risk advisory/audit practice
• Direct involvement in major control transformation projects
• Strong understanding of IFRS, COSO, and control testing methodologies
• Professional certification: CIA strongly preferred

Responsibilities

• Design and implement an enterprise-wide internal control framework aligned with COSO principles and tailored to Bosta's operating model across Egypt, and future markets
• Map all critical business processes end-to-end, identify control gaps, and build a prioritized remediation roadmap with clear owners and timelines
• Develop and maintain the Risk‑Control Matrix (RCM) covering financial reporting, operations, and compliance risks
• Prepare management representation letters, process narratives, and flowcharts for auditor review
• Support the Audit Committee with reporting, risk assessments, and control testing results
• Serve as the primary liaison with external auditors during annual audits and due diligence
• Coordinate internal audit activities — planning, fieldwork, reporting, and remediation tracking
• Monitor regulatory compliance requirements across operating jurisdictions and ensure Finance processes meet local and international standards (IFRS, tax, labor law, social insurance)
• Own the external vendors compliance framework for outsourced labor providers — ensuring payments accuracy verification, contract adherence
• Design preventive controls to detect policy violations before they reach Finance
• Identify manual processes that create control risk and champion automation or system‑based controls
• Work with IT and Operations to embed controls into existing systems (ERP, HRIS, payment platforms) rather than relying solely on detective controls
• Establish KPIs for control effectiveness and report quarterly to the Head of FP&A and CFO

Skills

Internal audit

COSO framework

IFRS knowledge

Risk assessment

ERP/IT controls

Education

CIA certification

Tools

SAP

Oracle

NetSuite

Job description

About Bosta

Launched in 2017, Bosta is an overnight delivery provider for E-commerce companies in Egypt. Leveraging technology to empower businesses is what we do best. Our goal is to disrupt the logistics industry by bringing technology and experience all together to provide a one-stop-shop for delivery solutions. We rely on advanced technology to deliver orders to our customers in a fast way. Businesses can track and connect with couriers and follow up on their orders - all in one system.

Job Code: I2026FPA-063

Job Responsibilities

• Design and implement an enterprise-wide internal control framework aligned with COSO principles and tailored to Bosta's operating model across Egypt, and future markets
• Map all critical business processes end-to-end, identify control gaps, and build a prioritized remediation roadmap with clear owners and timelines
• Develop and maintain the Risk‑Control Matrix (RCM) covering financial reporting, operations, and compliance risks
• Prepare management representation letters, process narratives, and flowcharts for auditor review
• Support the Audit Committee (once established) with reporting, risk assessments, and control testing results
• Serve as the primary liaison with external auditors during annual audits and due diligence
• Coordinate internal audit activities — planning, fieldwork, reporting, and remediation tracking
• Monitor regulatory compliance requirements across operating jurisdictions and ensure Finance processes meet local and international standards (IFRS, tax, labor law, social insurance)
• Own the external vendors compliance framework for outsourced labor providers — ensuring payments accuracy verification, contract adherence
• Design preventive controls to detect policy violations before they reach Finance
• Identify manual processes that create control risk and champion automation or system‑based controls
• Work with IT and Operations to embed controls into existing systems (ERP, HRIS, payment platforms) rather than relying solely on detective controls
• Establish KPIs for control effectiveness and report quarterly to the Head of FP&A and CFO

Job Qualifications

Must‑have Qualifications

• 7‑10 years of experience in internal audit, internal controls, or risk & compliance, with at least 3 years in a senior/lead role
• Experience in a Big 4 firm or equivalent (Deloitte, PwC, EY, KPMG), ideally in their risk advisory or audit practice
• Direct involvement in at least one major control transformation project
• Strong understanding of IFRS, COSO, and control testing methodologies
• Professional certification: CIA strongly preferred

Preferred Qualifications

• Industry experience in logistics, e‑commerce, or high‑growth technology companies
• Multi‑country experience is a plus
• Familiarity with ERP systems (SAP, Oracle, NetSuite) and data analytics tools for continuous monitoring

Behavioral Competencies

• Structured thinker: Can take a chaotic, undocumented process and turn it into a clear flowchart with controls, owners, and exception‑handling procedures
• Diplomatically relentless: Pushes for compliance without creating adversarial relationships with Operations and HR. Understands that controls must work with the business, not against it
• Comfortable with ambiguity: need to be energized, not paralyzed, by embracing ambiguity
• Communication range: Can write a board‑ready risk report and also explain to a hub manager why a new approval step matters
• Ownership mentality: Doesn't wait for the auditor to find the problem. Finds it first, fixes it, and documents the fix.