Ebury helps ambitious businesses unlock global growth, and we take the same approach with our people. We encourage innovation and movement, collaboration and problem-solving, and foster an environment where everyone can feel they belong, are valued, supported and empowered to succeed.

If you’re a collaborator who wants to help transform how businesses operate globally, get in touch - we’d love to discuss how Ebury can accelerate your career so you can shape the future.

Senior Internal Audit Manager – Compliance, Fraud & AML/CFT

Ebury Madrid Office - Hybrid: 4 days in the office, 1 day working from home per week

Role Overview

The Senior Audit Manager – Compliance, Fraud & Financial Crime (AML/CFT) is a subject matter expert responsible for delivering independent, objective 3rd Line of Defense assurance over regulatory compliance, fraud risk management, and financial crime frameworks.

This profile requires a seasoned assurance professional with deep technical expertise in anti-money laundering (AML), counter-terrorist financing (CFT), sanctions, fraud prevention and detection, customer due diligence (CDD/EDD), transaction monitoring, and regulatory reporting across cross-border financial services, payment institutions, and banking environments.

Qualification Area	Ideal Candidate Specification
Experience Level	5+ years in Internal Audit, 2nd Line Compliance Assurance, or Big 4 Risk Advisory
Core Qualifications	CAMS / CISA / ICA Diploma in Financial Crime Governance / ACA or CIA
Industry Focus	Payment Institutions, Electronic Money Institutions (EMIs), Fintech platforms, Financial Institutions.
Regulatory Familiarity	EU AML Directives (AMLD), FATF Standards

Job Purpose

The Senior Audit Manager – Compliance, Fraud & Financial Crime (AML/CFT) plays a pivotal role in providing assurance on the integrity and compliance of the organization’s control framework. The primary mission is to evaluate the adequacy, efficiency, and compliance of the internal control framework for Financial Crime Compliance (FCC) and Fraud Risk Management across all business units and international branches.

The role involves managing end-to-end audit lifecycles, evaluating regulatory compliance risks, conducting root-cause analysis on control gaps, and ensuring robust follow-up of managerial remediation commitments.

Key Responsibilities

Audit Planning & Execution

• Lead and execute complex thematic and branch-level AML/CFT audit engagements in accordance with international internal audit standards (IIA) and regulatory expectations.
• Prepare comprehensive Terms of Reference (ToR) defining audit scopes, objectives, resource allocations, and fieldwork testing timelines.
• Perform risk-based testing across key financial crime and fraud domains, including Customer Due Diligence (CDD/SDD/EDD), Ultimate Beneficial Owner (UBO) identification, Politically Exposed Persons (PEPs) management, Sanctions screening, internal and external fraud prevention controls, and Transaction Monitoring alert handling.
• Evaluate the alignment between local operational practices and group-wide financial crime policies.

Regulatory & Governance Assurance

• Assess the design and implementation of Business-Wide Risk Assessments (BWRA) and Overall Risk Assessments (ORA).
• Review regulatory reporting processes to local Financial Intelligence Units (FIUs) / Money Laundering Reporting Officers (MLROs) to ensure accuracy, completeness, and timeliness.
• Monitor and evaluate remediation actions stemming from past internal audit findings, external reviews, and supervisory inspections.
• Participate as an independent assurance representative in key risk and compliance steering committees.

Reporting & Stakeholder Engagement

• Draft clear, concise, and impact-oriented internal audit reports containing prioritized findings and actionable recommendations.
• Engage with local Compliance Officers, MLROs, Senior Management, and Business Line Leaders to validate findings and agree on realistic remediation plans.
• Support the Head of Internal Audit in preparing quarterly Audit Committee presentations, regulatory reporting packs, and board-level dashboards.Technical Competencies & Experience Requirements

Professional Experience

• Minimum of 5 years of experience in internal audit, external audit (Big 4), or second-line compliance monitoring within a regulated financial institution or payment service provider.
• Proven experience conducting end-to-end financial crime audits covering international operations or branch structures.
• Demonstrated experience handling regulatory remediation reviews and responding to supervisory findings (e.g., EU National Competent Authorities).

Education & Certifications

• Bachelor’s or Master’s degree in Law, Finance, Economics, Business Administration, or a related field.
• Professional certification in Financial Crime/Anti-Money Laundering or Fraud Risk (e.g., CAMS - Certified Anti-Money Laundering Specialist, CFE - Certified Fraud Examiner, ICA International Diploma in Governance, Risk and Compliance / AML).
• Recognized auditing or accounting qualification (e.g., CIA - Certified Internal Auditor, ACA/ACCA, or CISA - Certified Information Systems Auditor) is highly preferred.

Technical Skills & Competencies

• Deep knowledge of global AML/CFT standards, fraud risk management frameworks, sanctions compliance regimes, and relevant European directives/regulations.
• Strong familiarity with financial crime technology architectures, including screening engines, rules configuration, and automated transaction monitoring systems.
• Proficiency in data analytics tools (e.g., SQL, AuditBoard, Jira, Excel) to perform data-driven auditing and sample verification.
• Exceptional analytical skills with the ability to identify systemic root causes behind operational and control breakdowns.
• Fluency in English (written and spoken) is required; additional European languages are an advantage.
• Senior Stakeholder Management. Proven track record in presenting audit findings to Executive Committees, Audit Committees, and liaising with external auditors and regulatory bodies.

Why Ebury?

• Competitive Starting Salary with an annual discretionary bonus that truly rewards your performance from day one.
• Dedicated Mentorship: Learn directly from experienced managers who are invested in your success.
• Cutting-Edge Technology: Leverage state-of-the-art tailor made tools and systems that enable you to perform at your best.
• Clear, Accelerated Career Progression: Defined pathways to leadership and specialist roles within Ebury.
• Dynamic & Supportive Culture: Work in a collaborative environment where teamwork and personal growth are prioritized.
• Generous Benefits Package: Access competitive benefits tailored to your location, which typically include health care and social benefits.
• Central Office: A fantastic location with excellent transport links.

Ready to launch your career with a global FinTech? Click the ‘Apply’ Today and discover your potential at Ebury!

About us

Ebury delivers sophisticated, integrated solutions — business accounts, hedging, and financing — on a single platform with a seamless workflow. Our success is built on a simple premise and singular purpose: To help businesses operate and scale globally. 

Since its founding in 2009, Ebury has always been a fast-growing leader in fintech. Today, we bring together 2000+ Eburians across nearly 70 cities and we’re always looking to add to our team. 

At the heart of our offering is a proprietary platform, purpose-built to help businesses seamlessly streamline and manage global cash flow. We focus on continuous product evolution and innovation to build the infrastructure for borderless growth and help our clients scale at every stage. 

The opportunities at Ebury are as diverse as our people, ranging from business development to engineering roles across our tech pillars.

We believe in inclusion. We stand against discrimination in all forms and are against the intolerance of differences that makes us a modern and successful organisation. At Ebury, you can be whoever you want to be and still feel a sense of belonging no matter your story.

 

 

 

Important Security Notice for Job Applicants:
Ebury only accepts applications via official Ebury channels. We will only contact you from an @ebury.com domain. Always check the emails you receive from us, and note that we will never request payment for any part of the recruitment process. Stay safe and report suspicious activity.

Notice to Recruitment Agencies and Search Firms:
Ebury does not accept unsolicited resumes, CVs, or candidate profiles from recruitment agencies or search firms without signed written Ebury recruitment terms in place for a specific role. Any unsolicited applications will be considered the sole property of Ebury. Ebury will not be responsible or liable for any placement fees or costs associated with unagreed candidate submissions or subsequent hires.

AI Transparency Statement:
Ebury uses Artificial Intelligence (AI) and automated tools to help streamline certain parts of our recruitment process, however, these tools are strictly for administrative efficiency. All hiring decisions, including application reviews, shortlisting, and final selections are evaluated and conducted by human talent acquisition professionals and hiring managers.