The Role
We're looking for an independent, hands-on, and forward-thinking Head of Internal Audit to establish and lead Ziina's Internal Audit function.
As our first dedicated Internal Audit hire, you'll have the opportunity to build the function from the ground up, define its approach, and deliver independent assurance across our existing regulated operations and future regulated entities as Ziina expands.
You'll operate with significant autonomy and direct access to the Board of Directors, owning audit planning, execution, and reporting while working closely with teams across the business and maintaining the independence required of the function.
We're looking for someone who combines strong fintech audit experience with a pragmatic, technology-driven mindset. Someone who understands regulatory expectations, identifies meaningful risks, leverages data and automation, and builds effective audit practices without introducing unnecessary bureaucracy.
This is an opportunity to shape a modern Internal Audit function within a fast-growing fintech, with broad business exposure and meaningful influence over the Company's governance and control environment.
As a Head of Internal Audit at Ziina, you will:
Build and lead the Internal Audit function from the ground up, establishing its charter, methodology, policies, procedures, and governance framework in line with CBUAE requirements and applicable professional standards.
Develop and execute a risk-based Internal Audit Plan, independently assessing the effectiveness of governance, risk management, and internal controls across Ziina's regulated activities.
Conduct end-to-end audits, including planning, risk assessment, control testing, evidence evaluation, reporting, and remediation follow-up, initially operating as a standalone function.
Provide independent assurance across financial, operational, regulatory, and technology risks, including payments, AML/CFT, consumer protection, safeguarding of customer funds, outsourcing, cybersecurity, and data protection.
Leverage data analytics and automation to enhance audit testing, identify anomalies, assess controls at scale, and reduce manual processes, collaborating with Engineering and Data teams where relevant.
Provide independent reporting and insights to the Board, highlighting material risks, control deficiencies, audit findings, and remediation progress through clear, objective, and actionable recommendations.
Challenge stakeholders constructively, identifying root causes and recommending practical improvements while maintaining independence from management and operational decision-making.
Oversee audit findings and remediation, establishing appropriate tracking mechanisms, monitoring management's corrective actions, and independently validating their effectiveness.
Coordinate regulatory and external assurance activities with CBUAE, external auditors, and independent reviewers on matters within the Internal Audit function's remit.
Extend audit coverage to new regulated entities, adapting the audit approach to evolving business activities, products, jurisdictions, and applicable regulatory requirements.
Continuously improve audit effectiveness, introducing scalable processes, technology-enabled testing, and proportionate governance practices that support Ziina's growth.
To succeed in this role, you likely:
Have 7+ years of Internal Audit experience, including direct, hands-on experience auditing fintech companies, preferably within payments, digital financial services, or technology-driven regulated financial institutions.
Have a strong understanding of risk-based auditing, internal controls, corporate governance, and the IIA Global Internal Audit Standards.
Have experience operating within CBUAE-regulated environments or comparable financial regulatory frameworks, with the ability to understand and apply UAE regulatory requirements.
Hold a relevant professional qualification such as CIA, CPA, ACCA, or an equivalent recognized certification.
Have demonstrated experience developing audit plans, executing control testing, identifying findings, and communicating results to senior leadership or Board-level stakeholders.
Are comfortable establishing and operating a function independently, taking ownership of both strategic priorities and hands-on execution.
Understand technology-driven financial services and can assess risks across operational processes, financial crime controls, IT systems, and regulatory obligations.
Bring strong analytical skills and an interest in leveraging data, technology, and automation to improve audit effectiveness.
Exercise sound professional judgment, prioritize material risks, and deliver practical recommendations without unnecessary complexity.
Communicate clearly, challenge constructively, and build effective relationships across teams while maintaining professional independence.
Thrive in a fast-paced, evolving environment where ownership, adaptability, and execution are essential.
What would amaze us:
You've previously established or transformed an Internal Audit function, particularly within a fintech or high-growth regulated business.
You've personally developed automated audit tests, used SQL, Python, Power BI, or similar tools, or implemented data-driven audit methodologies.
You've introduced continuous auditing or monitoring approaches that improved risk detection, audit coverage, or operational efficiency.
You've audited payment platforms, digital financial products, AML/CFT systems, or technology infrastructure.
You've worked across multiple regulated entities or jurisdictions and successfully adapted audit frameworks to different regulatory requirements.
You're known for combining independent judgment, strong technical expertise, and a practical, solutions-oriented approach.
You've demonstrated the ability to build effective audit capabilities with lean resources, focusing on quality, meaningful risk coverage, and measurable outcomes.
Important Regulatory Requirement
This position is subject to the prior approval of the Central Bank of the UAE (CBUAE). The selected candidate must satisfy all applicable regulatory eligibility, fit-and-proper, and suitability requirements. The appointment and commencement of regulated duties will be conditional upon obtaining the required CBUAE approval.