Senior Internal Auditor

Crossian is a high-growth technology-driven e-commerce business. Behind our success is our people. As a start-up formed in 2020, we have created a fast-paced and dynamic environment, enabling our people to reach a cumulative average growth rate of over 1000% in just under 3 years. Our mission now is to build direct-to-consumer brands and increase customer lifetime value.

This role is for a senior individual contributor who can design and document internal controls. The company is formalizing its internal control framework for SOX readiness as the business scales. The objective is to build a control set that is lean, proportionate to risk, and meets compliance requirements. Core Competencies:

• Design & Documentation: review current documentations and directly enhance/ build/ develop risk control matrices, control narratives, flowcharts and SOPs as required.
• Readiness Lifecycle: understand the readiness lifecycle - scoping, control design, remediation, testing, external audit, attestation, and sustaining the framework.
• Risk-based & Pragmatic: apply risk-based judgment, design controls that meet the objective, and tailor standard frameworks to how the business actually operates.
• Credible Under Challenge: clearly articulate the rationale behind each control and navigate challenges while collaborating with process owners, external consultants and auditors.

Working Place:

• Ha Noi: 1st Floor, Pax Sky Building, 63-65 Ngo Thi Nham, Hai Ba Trung District, Ha Noi Capital
• Ho Chi Minh: Floor 12, Diamond Plaza, 34 Le Duan, Ben Nghe Ward, Ho Chi Minh City

Support the company’s SOX readiness by proposing, standardizing, and documenting processes and internal controls that meet compliance requirements while remaining practical and proportionate to the business. Work closely with control owners across relevant functions to implement these controls, and serve as the technical point of contact for external consultants and auditors throughout the audit cycle.

1. Internal Control & Compliance

• Scoping & Documentation: Develop risk assessments across entities, accounts, and processes; maintain risk control matrices (RCMs), process flowcharts, narratives, and SOPs.
• Control Optimization: Propose lean, automated control improvements to minimize manual effort and documentation while meeting compliance requirements.
• Change Integration: Assess new and evolving business processes and incorporate fit-for-purpose controls in a timely manner.
• Control Design & Gap Assessment: Assess control design across financial reporting cycles against the COSO Framework.
• Stakeholder Alignment: Work with process owners to explain controls, address concerns, and ensure agreed controls are implemented in daily operations.
• Process Standardization: Standardize control language and evidence across entities to ensure continuous audit-readiness.
• IT Collaboration: Collaborate with the IT Team to resolve control deficiencies and strengthen ITGC before testing and external audit.
• Testing & Remediation: Execute operating effectiveness testing, evaluate gap risks, and track remediation plans.

2. External Audit Coordination

• Act as the technical point of contact for external consultants/auditors in walkthroughs, testing and discussions regarding audit findings.
• Prepare and explain requested information and audit evidence, and address differences in views on control design when needed.
• Track and drive audit findings through to closure.

3. Compliance Operations & Framework Sustainment

• Review processes and underlying controls to support broader compliance and regulatory filings.
• Sustain the control framework post-certification through periodic refreshes, system update alignments, and next-cycle readiness.
• Train control owners on their control responsibilities and the purpose behind each control.

4. Reporting

• Consolidate testing results and deficiency logs to report key control risks to the CFO and executive management.

Education & Certifications

• Bachelor's degree in Accounting, Auditing or Finance.
• CIA, CPA or ACCA (obtained or actively in progress). An IT audit certification (CISA) is a plus.

Experience

• 6+ years of experience in internal or external audit, with direct hands-on experience in internal control programs (SOX 404/ICFR readiness, SOC 1/SOC 2, or equivalent) - including control testing, design, or implementation.
• 3+ years of experience with hands-on process and standard operating procedures review, improvements, and or development from ground up.
• Direct participation in at least one project designing or building an internal control framework.

Skills

• Technical Execution: Proficient in authoring process narratives, building RCMs, and conducting risk assessments.
• Domain Knowledge: Strong grasp of accounting principles and the COSO Framework.
• Agility & Fit: Thrive in fast-paced environments where the control framework is still maturing and business processes evolve frequently.
• Pragmatic Mindset: Adapt standard frameworks to the actual operating model, keeping documentation lean and effective.
• Communication: Professional English proficiency; confident in leading technical discussions with external consultants and global stakeholders.

At Crossian, our people are the key to our success. We believe in creating an attractive total compensation package (TCP) that not only retains employees but allows them to excel in their profession. These include:

• Total Compensation Package (Avg.18-30 months/year)
• Monthly Salary: Competitive and negotiable based on experience.
• Guaranteed Pay: 13th-month salary and 100% gross salary during probation.
• Global Health Insurance package.
• Statutory contributions (SI, HI, UI) based on 100% of gross salary.
• 5 working days per week (From Monday to Friday)
• 12 days of paid annual leave & 3 well-being off days.
• Training & Development budget.
• Team building budget.
• 5-star company events.
• Office Life: Dedicated Crossian Café and a well-stocked pantry with free refreshments.
• Other benefits in accordance with the Company’s Policy and Vietnam Labor Law.