Audit Manager – FCC and Compliance Audits

About the role

The Audit Manager – FCC & Regulatory Audit supports the Head of Regulatory, FCC & Compliance Audit in delivering independent assurance over the bank’s regulatory compliance and financial crime compliance frameworks across GCC operations. The role involves executing audits, validation reviews and providing governance oversight for AML/CFT, sanctions, transaction monitoring and risk assessment processes.

Key responsibilities

• Assist in delivering the annual FCC and regulatory compliance audit plan across GCC locations.
• Perform risk assessments, walkthroughs, testing and validation of FCC and regulatory controls.
• Audit AML/CFT frameworks, sanctions compliance, transaction‑monitoring controls, regulatory governance and customer risk assessment models.
• Prepare high‑quality audit documentation, observations and reports in line with internal audit methodology.
• Support thematic, system‑based and model‑focused reviews, including data‑analytics and special investigations.
• Review design and operating effectiveness of transaction‑monitoring models, sanctions‑screening systems, FCRA methodologies and CRAM frameworks.
• Validate remediation plans, monitor closure of findings and assist in external FCC‑related reviews.
• Coordinate with internal audit, compliance, risk, technology and business stakeholders, escalating significant control weaknesses.

Required profile

• Proven experience in audit execution and regulatory compliance within banking or financial services.
• Strong understanding of financial crime risk, AML/CFT regulations and sanctions requirements.
• Ability to assess governance, systems, processes and controls for effectiveness.
• Experience preparing audit reports and communicating findings to senior stakeholders.
• Capability to work collaboratively across compliance, risk, technology and business teams.

Required skills

• AML/CFT frameworks
• Sanctions compliance
• Transaction‑monitoring models and scenarios
• Customer risk assessment frameworks
• FCRA and CRAM methodologies
• Data‑analytics for audit purposes