About the role

ABOUT THE JOB Lean Technologies is a fast-growing fintech company building the financial data infrastructure for the MENA region. Operating in a highly regulated, security-sensitive environment, we serve mission-critical financial services that demand robust SLAs, strict security controls, and highly scalable systems. As an Internal Auditor you're responsible for independently assessing the adequacy and effectiveness of Lean's governance, risk management, and internal control frameworks across all group entities. The role executes the annual audit plan, evaluates compliance with applicable regulatory frameworks (including CBUAE, SAMA, ADGM FSRA, and VARA where relevant), and provides assurance to management and the Board/Audit Committee on the organization's control environment. The Moment: Lean has tripled in size over the past twelve months and is entering its next stage of growth. What began as the region’s pioneering Open Finance platform is evolving into a multi-product financial infrastructure company powering payments, data, and lending across MENA. We are expanding into new markets, launching new products, and operating at increasing scale and complexity. Lean has processed billions in transactions and serves more than 350 financial institutions and fintech clients, including Tabby, Careem, and DAMAC. and are backed by investors including General Catalyst, Sequoia Capital, and Bain Capital Ventures. This role is critical to ensuring that Lean’s governance, risk management, and control environment scales securely, reliably, and efficiently with the business. What You’ll Do: - Plan and execute risk-based internal audits across group entities, covering regulatory compliance, AML/CFT, technology and operations, governance, and financial controls. - Develop and maintain the annual group audit plan and universe, ensuring appropriate coverage of high-risk areas across all licensed entities. - Assess design and operating effectiveness of controls; identify control gaps, root causes, and process weaknesses. - Draft clear, actionable audit findings and reports for management and relevant committees (GLRCC, Audit Committee). - Track and follow up on remediation of audit findings and management action plans. - Liaise with external auditors, regulators, and second-line functions (Compliance, Risk) to ensure coordinated assurance coverage and avoid duplication. - Support internal audit outsourcing/co-sourcing arrangements where applicable, ensuring compliance with relevant regulatory restrictions on intra-group or outsourced audit work. - Stay current on regulatory developments across CBUAE, SAMA, ADGM FSRA, and VARA frameworks affecting audit scope and methodology. - Lead adhoc assessments as required by regulators and/or internal policies. - Contribute and support investigations as needed. - Maintain audit working papers and documentation to a standard suitable for regulatory inspection. Qualifications: - Bachelor's degree in Accounting, Finance, Business, or related field. - 4–7 years of internal audit experience, ideally within fintech, payments, or financial services. - Professional certification (CIA, CISA, ACCA, or equivalent) preferred. - Experience auditing across multiple regulatory jurisdictions (GCC experience strongly preferred). - Familiarity with Open Finance, Open Banking, Retail Payment Systems regulation, AML/CFT requirements, and virtual asset regulatory frameworks is a plus. Skills & Competencies: - Strong analytical and risk assessment skills. - Excellent written communication for audit reporting to senior stakeholders and committees. - Ability to work independently across multiple entities and manage competing priorities. - Sound understanding of internal control frameworks and audit methodologies. - High degree of professional skepticism, integrity, and discretion. NB. While we think the above experience could be important, we’re keen to