The INTERNAL AUDIT MANAGER is responsible for leading internal audit and enterprise risk management initiatives across multi-brand restaurant operations and head office functions.
Reporting directly to the CFO, this role ensures effective governance, regulatory compliance, fraud prevention, and risk-based auditing using recognized frameworks such as COSO ERM and ISO 31000. The position plays a key role in strengthening internal controls, managing enterprise-wide risks, and providing strategic insights to senior leadership and the Board.
KEY RESPONSIBILITIES
- Design and implement the Enterprise Risk Management (ERM) framework, conduct enterprise-wide risk assessments, maintain the risk register, and develop dashboards, KRIs, and heat maps for reporting to senior management and the Board.
- Lead the execution of annual risk-based audit plans covering restaurant outlets, commissaries, warehouses, and operational areas such as cash handling, inventory, food safety, labor compliance, POS systems, and delivery aggregators, including surprise audits.
- Conduct risk-based audits of head office functions including IT and cybersecurity, Finance and tax compliance, HR and DOLE compliance, Engineering and CAPEX controls, QA and food safety standards, Marketing spend governance, Supply Chain and vendor risk, and Legal/regulatory adherence.
- Ensure compliance with key Philippine regulations (FDA, DOLE, BIR, SEC, LGU, Data Privacy Act) while leading fraud investigations, forensic reviews, and continuous monitoring through data analytics.
- Manage audit and risk teams across regions, present audit findings and recommendations to the Board, and track timely closure of corrective actions.
JOB QUALIFICATIONS
- Bachelor's degree in Accountancy or Finance; CPA license required
- Extensive experience (12+ years) in internal audit and enterprise risk management
- Proven leadership experience (7+ years) in audit and risk functions, preferably within multi-site retail or restaurant operations
- Strong command of COSO ERM, risk-based auditing, and Philippine regulatory and compliance requirements
- Professional certifications such as CIA, CRMA, CISA, CFE, or an MBA are an advantage
- Experience in restaurant operations, ERP systems, supply chain management, and multi-site organizations is an advantage
