Senior Internal Audit Consultant

About the role

EY is hiring a Senior Consultant for its Internal Audit team in Luxembourg. You will work with regulated financial institutions on assignments combining assurance, risk insight and practical transformation. You will manage key parts of engagements, engage directly with client stakeholders and coach junior colleagues, while deepening your expertise in the Luxembourg regulatory environment.

Key responsibilities

• Plan and execute risk-based internal audit engagements.
• Assess the design and operating effectiveness of governance, risk management and internal control arrangements.
• Draft concise, evidence-based findings with root cause, risk and business impact, and pragmatic recommendations.
• Coordinate engagement activities, monitor progress and manage priorities in line with professional standards and agreed timelines.
• Maintain constructive stakeholder relationships.
• Support the design and enhancement of internal audit frameworks, risk assessments, audit universes, methodologies and annual audit plans.
• Monitor remediation of control deficiencies and assess whether corrective actions address the underlying risk.
• Identify opportunities to use data analytics, automation and AI-enabled auditing techniques.
• Coach junior team members, review their work and contribute to knowledge sharing and training.
• Contribute to proposals and audit solutions responding to client needs and regulatory expectations.

Required profile

• Master's degree in Accounting, Finance, Business Administration, Law or a related field.
• At least 2 to 3 years of professional experience in internal/external audit or a related role in the Luxembourg financial sector.
• Sound understanding of risk-based internal audit methodologies, control design, testing and professional reporting.
• Knowledge of the financial-services industry and the Luxembourg regulatory environment.
• Fluency in English and French; German or another European language is an advantage.

Required skills

• Ideal candidates have experience in finance, IT controls, data privacy and protection, anti-bribery and corruption, investor protection, outsourcing, operational resilience, anti-money laundering, AI governance or emerging technology risks.
• A relevant professional certification or interest in one, such as CIA, CRMA or CISA.
• Experience using data analytics or technology-enabled auditing techniques.