Internal Auditor

At CompoSecure, we are redefining the future of payment card technology. As a global leader in premium metal payment cards and fintech solutions, we combine innovation with craftsmanship to deliver exceptional products for the world's leading financial institutions.

We're looking for talented individuals who share our passion for excellence and innovation.

Internal Auditor

Reporting to: VP, Internal Audit and Senior Manager IT Audit

Position Summary

The Internal Auditor is responsible for identifying, assessing, and evaluating business, financial, operational, and information technology risks across the organization. The role supports the Internal Audit function through the execution of risk-based audits, SOX compliance testing, and advisory engagements covering both business process controls and IT controls.

This position requires a versatile audit professional who is comfortable working across financial, operational, and technology environments. The successful candidate will evaluate the effectiveness of internal controls, identify opportunities for process improvement, support risk management initiatives, and collaborate with business and IT stakeholders to strengthen the organization's control environment.

About the Internal Audit Function

The Internal Audit department is a centralized corporate function operating under GPGI, Inc. (NYSE: GPGI) the parent organization of Husky Technologies and its affiliated companies. Although this position is based at Husky Technologies in Bolton, the scope of responsibility extends across the broader group of companies. As a result, the role provides a unique opportunity to gain enterprise-wide exposure to diverse business operations, financial processes, digital technologies, and emerging risks while partnering with leaders across the organization to strengthen governance, risk management, and internal controls.

Key Responsibilities

Internal Auditor

• Execute risk-based internal audits covering operational, financial, compliance, and technology processes.
• Assist in identifying and assessing enterprise risks and evaluating the adequacy of mitigating controls.
• Support the development and execution of the annual internal audit plan.
• Evaluate the effectiveness of internal controls and compliance with company policies, regulatory requirements, and established frameworks.
• Prepare audit programs, testing methodologies, and working papers in accordance with Internal Audit Standards.
• Document audit findings, assess root causes, and develop practical recommendations for management.
• Prepare audit reports and communicate results to management.
• Monitor management action plans and perform remediation validation testing.
• Conduct special reviews, investigations, and ad hoc risk assessments as required.
• Support fraud risk assessments and the evaluation of anti-fraud controls.

Business Process and SOX Controls

• Perform annual SOX testing of Internal Control over Financial Reporting (ICOFR).
• Evaluate business process controls across key financial cycles including:
  • Order-to-Cash
  • Procure-to-Pay
  • Inventory and Manufacturing
  • Financial Close and Reporting
  • Payroll
  • Treasury
• Assess design and operating effectiveness of manual controls supporting business processes.
• Review process narratives and maintain risk and control matrices, and control documentation.
• Ensure controls remain current, effective, auditable, and aligned with organizational objectives.
• Support external audit requirements related to control testing and compliance.

IT Audit and Technology Risk

• Perform testing of IT General Controls (ITGCs), IT Application Controls (ITACs), and Information Used in Controls (IUCs).
• Execute audits of technology processes including:
  • User access management
  • Change management
  • IT operations
  • System development and implementation
  • Cybersecurity and data protection controls
• Evaluate ERP systems, interfaces, integrations, and automated controls.
• Assess risks associated with new system implementations and business transformation projects.
• Review IT governance, risk management, and control frameworks.
• Support management in identifying and remediating IT control deficiencies.
• Collaborate with internal and external auditors on technology-related audits and compliance requirements.

Qualifications

Education

• Bachelor's degree in Accounting, Finance, Information Systems, Business Administration, Risk Management, or a related discipline.
• Professional designation preferred:
  • CPA
  • CIA
  • CISA
  • CRISC
  • Equivalent professional certification

Experience

• 3 to 7 years of experience in Internal Audit, Risk Management, SOX Compliance, IT Audit, Public Accounting, or a related field.
• Experience testing both business process controls and IT controls.
• Strong knowledge of SOX, COSO, risk assessment methodologies, and internal control frameworks.
• Experience with ERP environments such as SAP, Oracle, Microsoft Dynamics, or similar systems.
• Experience supporting remediation activities and follow-up testing.
• Public accounting or consulting experience is considered an asset.

Knowledge, Skills, and Abilities

• Strong understanding of internal control principles and risk management practices.
• Knowledge of SOX, COSO, ITGC, ITAC, and Information Used in Controls (IUCs).
• Ability to evaluate both manual and automated control environments.
• Excellent analytical, problem-solving, and critical thinking skills.
• Strong verbal, written, and presentation skills.
• Ability to build relationships and influence stakeholders across business and IT functions.
• Strong documentation and report-writing skills.
• Ability to manage multiple projects and meet deadlines.
• Advanced Microsoft Excel and Office skills.
• Experience using Optro/ AuditBoard or other audit management software is an asset.
• Ability to work independently with minimal supervision.

Working Conditions

• Office environment with regular computer-based work.
• Periodic travel to operating locations as required (10-20%).
• Interaction with business, finance, operations, and IT teams across the organization.

CompoSecure is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, or national origin. We are also an equal opportunity employer of individuals with disabilities and protected veterans.

Please note: CompoSecure does not accept unsolicited resumes from staffing agencies or third-party recruiters. Any unsolicited resumes sent to CompoSecure, including to our employees, will become the property of CompoSecure and may be used without any obligation to pay referral or placement fees. Any agency or recruiter seeking to work with CompoSecure's Talent Acquisition Team should contact our team directly by sending an email to

recruiting@composecure.com

CompoSecure offers competitive compensation, comprehensive benefits, and the opportunity to work alongside a team of dedicated professionals who are shaping the future of financial technology.

Pay Range

Offers will be negotiated based on each candidate's qualifications.

Incentive Compensation
This role may be eligible to participate in our annual or quarterly incentive plan. Incentives are earned based on employee performance against defined metrics and company goals.

Benefits
Full-time employees are eligible for our comprehensive benefits program which includes Group Healthcare, Dental, Vision, Flexible Spending Account, Group Term Life Insurance, and 401(k) retirement plan. You will be eligible to participate in benefits on the first day of the month after your hire date.

CompoSecure is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status.