Director of Internal Audit

Korn Ferry; Jacksonville (FL); On-site; USD 140,000 - 210,000; Full time

Job summary

Korn Ferry partnered with our client to search for a Director of Internal Audit. This role leads a comprehensive, risk-based internal audit program across financial, operational, regulatory, and technology domains in a complex energy and wholesale market environment.

Reporting to the Board and the CEO, you will craft the annual audit plan, oversee audits, and provide independent insights to strengthen governance and controls.

Qualifications

• Bachelor's degree in accounting, finance, business administration, information systems, or a related discipline required.
• Master's degree in business administration, accounting, finance, or a related field preferred.

Responsibilities

• Lead risk-based internal audit program aligned with the organization’s objectives and risk appetite.
• Plan, execute, and report on audits to the Board and Audit Committee.
• Coordinate with external auditors while maintaining independence.
• Develop and enhance data analytics to improve audit coverage and efficiency.
• Advise on governance, controls, and risk mitigation initiatives across the organization.
• Ensure compliance with applicable professional standards and policies.

Skills

Governance & risk

Audit leadership

Data analytics

Regulatory knowledge

Education

Bachelor's in accounting/finance

MBA or MS in related field

Job description

Korn Ferry has partnered with our client on their search for a role, Director of Internal Audit

Position Summary

The Director of Internal Audit is responsible for providing independent, objective assurance and advisory services to evaluate and strengthen the organization’s governance, risk management, internal controls, and operational effectiveness. This role provides strategic oversight of the internal audit function, ensuring that significant financial, operational, commercial, regulatory, technology, and enterprise risks are appropriately identified, assessed, and managed.

Reporting to the Board of Directors, the Finance & Audit Committee, and the Chief Executive Officer, the Director of Internal Audit serves as a trusted advisor to executive leadership and the Board, delivering independent insights into the effectiveness of organizational controls, the integrity of financial and operational processes, and the management of business risks.

The Director will develop and execute a risk-based internal audit program tailored to a complex energy and wholesale market environment, including portfolio management, energy trading, risk control, settlements, financial reporting, information technology, data analytics, regulatory compliance, and other critical business functions. The role promotes accountability, transparency, operational discipline, and continuous improvement while supporting the organization’s strategic objectives and fiduciary responsibilities.

Reporting Relationships

The Director of Internal Audit reports to and maintains direct communication with:

• Board of Directors: Provides independent assurance regarding governance, enterprise risk management, internal controls, and organizational performance.
• Finance & Audit Committee: Presents the risk-based audit plan, audit results, significant control deficiencies, remediation progress, and emerging risk considerations.
• Chief Executive Officer: Coordinates audit activities, communicates material findings, supports management accountability, and advises on opportunities to strengthen processes and controls.

The Director must maintain organizational independence and objectivity. The Finance & Audit Committee and Board of Directors should provide oversight of the internal audit function, including approval of the audit charter, risk-based audit plan, and appointment, evaluation, and removal of the Director, as appropriate. The Director will have unrestricted access to the Board, Committee, executive leadership, employees, records, systems, and other information necessary to fulfill the responsibilities of the position.

Essential Duties and Responsibilities

Internal Audit Strategy and Leadership

• Develop, implement, and maintain a comprehensive, risk-based internal audit strategy aligned with the organization’s business objectives, risk appetite, governance framework, and regulatory obligations.
• Prepare and present an annual internal audit plan informed by enterprise risk assessments, emerging business risks, management input, and Board and Finance & Audit Committee priorities.
• Lead financial, operational, compliance, technology, commercial, and integrated audits across the organization.
• Establish and maintain the internal audit charter, policies, methodologies, procedures, and quality assurance practices consistent with applicable professional standards.
• Allocate audit resources effectively, balancing planned engagements with emerging risks, special reviews, and requests from the Board or Finance & Audit Committee.
• Evaluate opportunities to use data analytics, continuous auditing, automation, and other technology-enabled approaches to enhance audit coverage and efficiency.
• Maintain appropriate professional development, quality assurance, and continuous improvement programs for the internal audit function.

Board and Finance & Audit Committee Reporting

• Serve as the principal internal audit advisor to the Board of Directors and Finance & Audit Committee on internal control effectiveness, governance, risk exposure, and audit-related matters.
• Present the annual risk-based audit plan, material audit findings, significant control deficiencies, management action plans, and remediation status.
• Communicate significant risks, suspected fraud, control breakdowns, regulatory concerns, and other material matters promptly to the appropriate governance body.
• Provide independent assessments of management’s response to audit findings and escape overdue or inadequate corrective actions.
• Prepare concise, decision-oriented reports that identify root causes, business implications, risk exposure, and practical recommendations.
• Maintain direct and confidential communication with the Finance & Audit Committee and Board, including executive sessions without management present when appropriate.
• Advise the Board and Committee on changes in the risk environment, emerging threats, and opportunities to strengthen governance and accountability.

Enterprise Risk Management and Internal Controls

• Evaluate the design and operating effectiveness of internal controls across financial, operational, commercial, compliance, and technology processes.
• Assess the effectiveness of enterprise risk management practices, including risk identification, measurement, monitoring, reporting, and mitigation.
• Review the organization’s risk assessment processes and determine whether significant risks are appropriately reflected in management decisions and control activities.
• Evaluate the effectiveness of segregation of duties, approval authorities, access controls, reconciliations, documentation, and other key safeguards.
• Identify control gaps, process inefficiencies, and opportunities to improve consistency, reliability, and accountability.
• Partner with management and risk leaders to strengthen controls without assuming ownership of management responsibilities or compromising audit independence.
• Assess whether risk management practices are proportionate to the organization’s activities, business complexity, and strategic priorities.

Financial and Operational Audits

• Oversee audits of financial reporting, accounting practices, treasury, cash management, budgeting, forecasting, financial planning, and financial close processes.
• Assess the accuracy, completeness, timeliness, and integrity of financial and management reporting.
• Evaluate key business processes, including procurement, vendor management, contract administration, payroll, expense management, and capital or operating expenditures, as applicable.
• Review the effectiveness of operational workflows, performance measures, resource utilization, and process controls.
• Assess the adequacy of policies, procedures, approval structures, and documentation supporting significant transactions and business decisions.
• Evaluate the effectiveness of controls designed to prevent errors, unauthorized transactions, financial misstatement, waste, and misuse of organizational assets.
• Coordinate with external auditors, as appropriate, to support efficient audit coverage while preserving the independence and scope of the internal audit function.

Energy Trading, Commercial Risk, and Market Operations

• Develop audit coverage appropriate to wholesale energy markets, portfolio management, energy trading, power supply management, and related commercial activities.
• Evaluate controls over trade capture, deal authorization, pricing, valuation, confirmations, settlements, and transaction recording.
• Review the integrity and reliability of trading systems, position reporting, exposure measurement, valuation models, and supporting market data.
• Assess compliance with approved trading authorities, commercial policies, risk limits, counterparty credit requirements, and escalation protocols.
• Evaluate the effectiveness of controls governing market risk, credit risk, liquidity risk, operational risk, and other material exposures.
• Review processes supporting energy scheduling, congestion and transmission-related activities, market settlements, and financial reconciliation, as applicable.
• Assess the governance and validation of analytical models, assumptions, data inputs, and management reports used in commercial decision-making.
• Evaluate controls over third-party market platforms, service providers, contractual arrangements, and other dependencies that could affect operational or financial performance.
• Provide independent insight into whether commercial risk controls are appropriately designed, consistently applied, and supported by reliable information.

Regulatory Compliance and Corporate Governance

• Assess compliance with applicable laws, regulations, contractual obligations, internal policies, and relevant energy-market requirements.
• Evaluate controls supporting regulatory reporting, record retention, trade documentation, and compliance monitoring.
• Review the adequacy of policies and procedures addressing conflicts of interest, ethics, confidentiality, records management, and appropriate use of organizational resources.
• Assess governance practices, delegated authorities, policy compliance, and the effectiveness of oversight mechanisms.
• Coordinate with legal, compliance, risk management, and other relevant functions to identify and address potential compliance gaps.
• Monitor changes in regulatory requirements and industry practices that may affect the organization’s control environment.
• Communicate material compliance weaknesses and recommend practical measures to mitigate exposure.

Information Technology, Cybersecurity, and Data Governance

• Evaluate information technology general controls, including logical access, privileged access, change management, system development, and IT operations.
• Assess cybersecurity governance, incident response, data protection, business continuity, disaster recovery, and technology resilience controls.
• Review controls over critical trading, settlement, financial, analytical, and reporting systems.
• Evaluate data integrity, data lineage, system interfaces, access permissions, and the reliability of information used for financial and operational decisions.
• Assess risks associated with cloud services, third-party technology providers, software implementations, and emerging technologies, including artificial intelligence where applicable.
• Review technology project governance, system implementation controls, and post-implementation performance.
• Coordinate with information security and technology teams while maintaining independent assurance over their control environments.

Fraud Risk and Special Investigations

• Develop and maintain an audit approach that considers fraud risks, management override, conflicts of interest, unauthorized transactions, and potential misconduct.
• Evaluate the design and effectiveness of fraud prevention, detection, reporting, and investigation controls.
• Lead or coordinate independent reviews and investigations at the direction of the Board, Finance & Audit Committee, or appropriate executive authority.
• Preserve the confidentiality, integrity, and documentation of investigations and related evidence.
• Coordinate with legal counsel, human resources, compliance, external auditors, and other relevant parties when appropriate.
• Escalate credible allegations of fraud, misconduct, or material control failures through established governance channels.
• Recommend corrective actions addressing root causes, control weaknesses, and opportunities to prevent recurrence.

Audit Findings and Corrective Action Monitoring

• Establish a consistent methodology for documenting audit observations, assessing risk, determining root causes, and developing recommendations.
• Collaborate with management to establish clear corrective action plans, accountable owners, and reasonable completion dates.
• Maintain a centralized process for tracking findings, overdue actions, management commitments, and remediation evidence.
• Perform follow-up reviews to validate that corrective actions have been implemented and are operating effectively.
• Escalate unresolved high-risk findings and instances of repeated control deficiencies to executive leadership and the Finance & Audit Committee.
• Report trends in audit findings and identify systemic issues requiring broader organizational action.
• Promote a constructive, solutions-oriented audit culture focused on sustainable improvement and risk reduction.

Executive Partnership and Organizational Effectiveness

• Establish productive working relationships with executive leadership, finance, legal, compliance, commercial operations, risk management, information technology, and other business leaders.
• Provide objective advisory services on governance, controls, risk mitigation, process design, and significant business initiatives, subject to safeguards protecting audit independence.
• Communicate audit conclusions clearly and constructively, translating technical findings into actionable business recommendations.
• Promote a culture of ethical conduct, accountability, transparency, and continuous improvement.
• Monitor industry developments, emerging business models, and evolving risks relevant to the organization.
• Support the organization’s long-term objectives by identifying opportunities to strengthen processes, improve decision-making, and protect organizational resources.

Qualifications and Experience

Education

• Bachelor’s degree in accounting, finance, business administration, information systems, or a related discipline required.
• Master’s degree in business administration, accounting, finance, or a related field preferred.

Professional Certifications

One or more of the following certifications is preferred:

• Certified Internal Auditor (CIA).
• Certified Public Accountant (CPA).
• Certified Information Systems Auditor (CISA).
• Certification in Risk Management Assurance (CRMA).

Professional Experience

• At least 10 years of progressively responsible experience in internal audit, external audit, enterprise risk management, financial controls, compliance, or a related discipline.
• At least 5 years of experience leading audit engagements, managing audit teams, or overseeing a significant audit or risk management function.
• Demonstrated experience presenting audit findings, risk assessments, and recommendations to executive leadership, audit committees, or boards of directors.
• Experience auditing complex financial, commercial, operational, or technology-driven business environments.
• Familiarity with wholesale energy markets, energy trading, utility operations, commodity markets, or other complex trading environments strongly preferred.
• Demonstrated knowledge of internal control frameworks, enterprise risk management, financial reporting, and risk-based audit methodologies.
• Experience evaluating information technology controls, cybersecurity risks, data governance, and system-dependent business processes.
• Experience managing sensitive investigations, significant control deficiencies, and remediation programs is desirable.
• Experience working with external auditors, legal counsel, regulators, and other independent assurance providers is preferred.

Knowledge, Skills, and Competencies

The successful candidate will demonstrate:

• Independence and integrity: Exercises sound judgment, maintains objectivity, and communicates difficult findings with professionalism and courage.
• Strategic risk perspective: Understands the relationship between business strategy, enterprise risk, internal controls, and organizational performance.
• Analytical capability: Evaluates complex financial, commercial, operational, and technology information to identify trends, anomalies, root causes, and emerging risks.
• Executive communication: Presents complex issues clearly and concisely to the Board, Finance & Audit Committee, CEO, and senior management.
• Commercial acumen: Understands business models, financial drivers, operational processes, and the potential impact of risk exposures.
• Leadership and influence: Builds credibility across the organization and encourages accountability without compromising independence.
• Practical problem-solving: Develops risk-based, cost-effective recommendations that address underlying issues and support sustainable improvement.
• Confidentiality and discretion: Handles sensitive business information, investigations, and governance matters appropriately.
• Adaptability: Responds effectively to changing business priorities, market conditions, technology developments, and emerging risks.
• Continuous improvement: Uses professional standards, data analytics, and innovative audit practices to enhance assurance and organizational effectiveness.

Independence and Professional Standards

The Director of Internal Audit will operate in accordance with the organization’s approved internal audit charter and applicable professional standards, including the Global Internal Audit Standards issued by the Institute of Internal Auditors, as adopted by the organization.

The position must remain independent of the business activities subject to audit and must not assume operational responsibilities for the controls, risk management processes, or activities being evaluated. The Director is responsible for identifying potential impairments to independence or objectivity and communicating them to the Finance & Audit Committee.

The Director will coordinate with other assurance functions to promote appropriate coverage, minimize unnecessary duplication, and provide the Board and executive leadership with a comprehensive view of significant risks.

Measures of Success

Performance in this role will be evaluated based on the Director’s ability to:

• Deliver a risk-based audit plan aligned with the organization’s strategic priorities and changing risk profile.
• Provide timely, accurate, and actionable reporting to the Board, Finance & Audit Committee, and CEO.
• Identify material control weaknesses and emerging risks before they result in significant financial, operational, regulatory, or reputational consequences.
• Improve the effectiveness of internal controls and enterprise risk management practices.
• Support timely and sustainable remediation of significant audit findings.
• Strengthen controls over energy trading, financial reporting, market operations, technology, and other critical business processes.
• Maintain the independence, quality, credibility, and professional standards of the internal audit function.
• Build trusted relationships with governance bodies and management while preserving objective oversight.
• Demonstrate measurable improvements in audit efficiency, risk coverage, and organizational accountability.