Associate Director – Interne Kontrollsysteme und Assurance (m/w/d)

Redcare Pharmacy; Köln; Hybrid; EUR 120,000 - 180,000; Full time

Benefits offered by this job

Work from home up to 20 days/year (EU)

Deutschland Ticket

Mental health support

Career development

Job summary

Redcare Pharmacy is seeking a Director, Internal Controls & Assurance to build and lead a new IC&A function across the company. You will define the control framework, governance, and assurance cadence with a focus on risk-based controls, evidence, and remediation.

You will report to the Chief Audit Executive, drive improvements, and collaborate with finance, technology, and business leaders to ensure robust control environments company-wide.

Qualifications

• Extensive experience in internal controls and risk assurance.
• Proven track record establishing or maturing an enterprise control framework across domains.
• CIA preferred; CPA/ACCA/CISA welcome.
• Experience in listed, regulated, international environments.

Responsibilities

• Establish and lead IC&A function with mandate, governance and priorities.
• Define control taxonomy, evidence standards and testing methodology.
• Oversee risk-to-control mapping and expansion across Finance, Technology, HR, Operations, Pharmacy, Quality, Compliance, Privacy, Security, Sustainability.
• Set annual assurance scope and assess plans; challenge control design and remediation.
• Lead management reporting and senior stakeholder engagement across lines of defense.

Skills

Internal controls

Risk assurance

Internal audit

SOX/ICFR

Control framework

GRC platforms

AuditBoard

Leadership

Communication

Education

CIA certification

CPA/ACCA/CISA

Tools

AuditBoard

Optro

Job description

About Redcare Pharmacy

As Europe's No.1 e-pharmacy Redcare Pharmacy is powered by passionate teams and cutting-edge innovation. We strive to create a healthy collaborative work environment where every employee feels valued and inspired to contribute to our vision "Until every human has their health". If you're seeking a career that offers purpose and aligns with your values join us and start your #Redcareer today.

Job Description

About the role

We are looking for a Director, Internal Controls & Assurance to establish and lead our newly created Internal Controls & Assurance (IC&A) function. This is a rare opportunity to build a company-wide function from the ground up at a fast-growing, listed European e-commerce and healthcare company. Reporting to our Chief Audit Executive, you will own the enterprise Internal Control Framework, its methodology and governance model, and the annual assurance cycle across financial, operational, technology, compliance and reporting domains. As a second-line leader, you will set the standards, challenge control design and remediation, and give Management documented, evidence-based assurance over whether key controls are designed appropriately and operating effectively. Your work will directly support the Managing Board's annual assessment of the control environment. You will have a high degree of autonomy, work with leading GRC software (AuditBoard/Optro), and lead and develop a small team that is set to grow.

About your tasks

Build & Lead the IC&A Function

• Establish and lead Redcare Pharmacy's Internal Controls & Assurance function, including its mandate, governance, operating model, annual priorities and team capabilities.
• Develop and lead the IC&A team, decide when specialist or co-sourced expertise is needed, and continuously improve the scalability, automation and quality of the assurance process.

Framework & Methodology

• Own and maintain the enterprise Internal Control Framework, ensuring one consistent methodology connects risks, processes, controls, evidence and assurance across the company.
• Define and approve the control taxonomy, minimum evidence standards, design-assessment criteria, operating-effectiveness testing methodology, sampling principles and deficiency-rating framework.
• Together with Enterprise Risk Management, oversee risk-to-control mapping and drive the framework's expansion into Finance, Technology, HR, Operations, Pharmacy, Quality, Compliance, Privacy, Security, Sustainability and other business areas.

Assurance & Challenge

• Set the annual assurance scope and assessment plan based on risk, maturity, regulatory requirements and Management priorities.
• Review and approve significant control-design conclusions and deficiency judgements, so that assessments are consistent and well supported.
• Challenge Directors, senior leaders and executives where control design, evidence, ownership or remediation falls short, and resolve significant disagreements over ratings and corrective actions.

Reporting & Stakeholder Management

• Own Management reporting on the control environment, including dashboards, deficiency reporting and the annual Management Assurance Report to the Managing Board.
• Lead senior engagement with business leadership, control coordinators, Enterprise Risk Management, Internal Audit and External Audit, while keeping first-, second- and third-line responsibilities clear.

Qualifications

• Substantial experience in internal controls, risk assurance, internal audit, SOX/ICFR or a comparable control-assurance environment, including ownership or leadership of an enterprise control framework.
• Proven track record of establishing, transforming or significantly maturing an Internal Control Framework across multiple business domains, not only Finance.
• Advanced practical knowledge of control design, walkthroughs, operating-effectiveness testing, evidence evaluation, deficiency assessment and remediation governance.
• Sound judgement in evaluating significant deficiencies and the confidence to challenge senior executives.
• Strong understanding of the Three Lines Model.
• Strong leadership and communication skills, including people management and clear written reporting for executive and Board-level audiences.
• Experience in a listed, regulated, international or similarly complex environment.
• CIA certification preferred; CPA, ACCA, CISA or equivalent are also welcome.
• Familiarity with COSO/SOX, experience working with External Audit, and hands-on use of GRC platforms such as AuditBoard/Optro, ideally including AI-supported ways of working, are a strong plus.
• Experience in healthcare, pharmacy, e-commerce, logistics or another technology- and data-intensive environment is a plus.
• Fluent in English; German is a plus.

Additional Information

About your Benefits

In order to provide our employees with the best possible support for their individual needs, we offer a wide range of benefits:

• Work from Home: If your job does not require you to be present in the office, we can arrange the place you work from individually - even for up to 20 days a year anywhere in the EU.
• Redcare events: We promote teambuilding through creative team events, and celebrate our successes together at regularly scheduled parties.
• Kindergarten Grant: We offer our employees who pay for childcare in kindergarten 100,00 € (total) per month.
• Mental health: Get quick professional help from psychologists from nilo if you feel overwhelmed in your personal or professional life. Anonymously and free of charge.
• Personal Development: We are all constantly learning. That's why we support and foster your career development through internal & external training and help you grow.
• Mobility: Your commute matters to us. We provide our employees with a fully costed Deutschland Ticket which can be used at any time.
• Sports & Health: Your well-being is our top priority. Therefore, we offer you a range of opportunities to improve your health. Profit from a membership (M) package at Urban Sports Club, providing a variety of sports offers tailored to your interests.