Internal Auditor

Position Overview:

The Internal Auditor is responsible for identifying, assessing, and evaluating business, financial, operational, and information technology risks across the organization. The role supports the Internal Audit function through the execution of risk-based audits, SOX compliance testing, and advisory engagements covering both business process controls and IT controls.

This position requires a versatile audit professional who is comfortable working across financial, operational, and technology environments. The successful candidate will evaluate the effectiveness of internal controls, identify opportunities for process improvement, support risk management initiatives, and collaborate with business and IT stakeholders to strengthen the organization's control environment.

This role is based in Somerset, Nj 5 days a week

About the Internal Audit Function

The Internal Audit department is a centralized corporate function operating under GPGI, Inc. (NYSE: GPGI) the parent organization of Husky Technologies and its affiliated companies. Although this position is based at Husky Technologies in Bolton, the scope of responsibility extends across the broader group of companies. As a result, the role provides a unique opportunity to gain enterprise-wide exposure to diverse business operations, financial processes, digital technologies, and emerging risks while partnering with leaders across the organization to strengthen governance, risk management, and internal controls.

Key Responsibilities:

Internal Auditor

• Execute risk-based internal audits covering operational, financial, compliance, and technology processes.
• Assist in identifying and assessing enterprise risks and evaluating the adequacy of mitigating controls.
• Support the development and execution of the annual internal audit plan.
• Evaluate the effectiveness of internal controls and compliance with company policies, regulatory requirements, and established frameworks.
• Prepare audit programs, testing methodologies, and working papers in accordance with Internal Audit Standards.
• Document audit findings, assess root causes, and develop practical recommendations for management.
• Prepare audit reports and communicate results to management.
• Monitor management action plans and perform remediation validation testing.
• Conduct special reviews, investigations, and ad hoc risk assessments as required.
• Support fraud risk assessments and the evaluation of anti-fraud controls.

Business Process and SOX Controls

• Perform annual SOX testing of Internal Control over Financial Reporting (ICOFR).
• Evaluate business process controls across key financial cycles including:
• Order-to-Cash
• Procure-to-Pay
• Inventory and Manufacturing
• Financial Close and Reporting
• Payroll
• Treasury
• Assess design and operating effectiveness of manual controls supporting business processes.
• Review process narratives and maintain risk and control matrices, and control documentation.
• Ensure controls remain current, effective, auditable, and aligned with organizational objectives.
• Support external audit requirements related to control testing and compliance.

IT Audit and Technology Risk

• Perform testing of IT General Controls (ITGCs), IT Application Controls (ITACs), and Information Used in Controls (IUCs).
• Execute audits of technology processes including:
• User access management
• Change management
• IT operations
• System development and implementation
• Cybersecurity and data protection controls
• Evaluate ERP systems, interfaces, integrations, and automated controls.
• Assess risks associated with new system implementations and business transformation projects.
• Review IT governance, risk management, and control frameworks.
• Support management in identifying and remediating IT control deficiencies.
• Collaborate with internal and external auditors on technology-related audits and compliance requirements.

Qualifications:

Education

• Bachelor's degree in Accounting, Finance, Information Systems, Business Administration, Risk Management, or a related discipline.
• Professional designation preferred:
• CPA
• CIA
• CISA
• CRISC
• Equivalent professional certification

Experience:

• 3 to 7 years of experience in Internal Audit, Risk Management, SOX Compliance, IT Audit, Public Accounting, or a related field.
• Experience testing both business process controls and IT controls.
• Strong knowledge of SOX, COSO, risk assessment methodologies, and internal control frameworks.
• Experience with ERP environments such as SAP, Oracle, Microsoft Dynamics, or similar systems.
• Experience supporting remediation activities and follow-up testing.
• Public accounting or consulting experience is considered an asset.

Knowledge, Skills, and Abilities

• Strong understanding of internal control principles and risk management practices.
• Knowledge of SOX, COSO, ITGC, ITAC, and Information Used in Controls (IUCs).
• Ability to evaluate both manual and automated control environments.
• Excellent analytical, problem-solving, and critical thinking skills.
• Strong verbal, written, and presentation skills.
• Ability to build relationships and influence stakeholders across business and IT functions.
• Strong documentation and report-writing skills.
• Ability to manage multiple projects and meet deadlines.
• Advanced Microsoft Excel and Office skills.
• Experience using Optro/ AuditBoard or other audit management software is an asset.
• Ability to work independently with minimal supervision.

Working Conditions

• Office environment with regular computer-based work.
• Periodic travel to operating locations as required (10-20%).
• Interaction with business, finance, operations, and IT teams across the organization.

About CompoSecure CompoSecure, a GPGI business (NYSE: GPGI), is the leading manufacturer of Premium Metal Payment Cards and also offers best-in-class Authentication and Digital Asset solutions. The Company's offerings combine elegance, simplicity, and security to deliver exceptional experiences and peace of mind, enabling trust for millions of people around the globe. For more information, please visit www.CompoSecure.com and www.GetArculus.com.

We offer a comprehensive benefits package designed to support your health, financial well-being, and work-life balance, including medical, prescription, dental, and vision coverage; FSA/HSA options; company-paid life and disability insurance; 401(k) with company match; paid time off (PTO) and holidays; annual bonus opportunities; an employee assistance program (EAP); and opportunities for career growth and advancement.

Additional details will be provided during the hiring process.

CompoSecure is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, or national origin. We are also an equal opportunity employer of individuals with disabilities and protected veterans.

Please note: CompoSecure does not accept unsolicited resumes from staffing agencies or third-party recruiters. Any unsolicited resumes sent to CompoSecure, including to our employees, will become the property of CompoSecure and may be used without any obligation to pay referral or placement fees. Any agency or recruiter seeking to work with CompoSecure's Talent Acquisition Team should contact our team directly by sending an email to recruiting@composecure.com.