Internal Auditor and Risk Analyst

The Role..

This is a fantastic opportunity to join the Internal Audit & Risk Management (IA&RM) team at Soho House, based in our Milton Keynes located hub. You will work across a wide range of areas in the UK and internationally, giving you real breadth and variety in your role. As a trusted advisor, you will review and challenge how the business operates, support improvements to the risk environment, and make a tangible impact during an exciting period of transformation.

What makes this role stand out is the mix of traditional audit delivery with enterprise risk management, giving you exposure to every corner of the business from commercial operations to group functions. If you’re looking for a role that blends challenge, variety, and the chance to influence a brand’s journey, this is it.

Our business support teams are in the office four days a week as we believe that skills are developed through collaboration, and that spending time together makes us more creative and connected.

What you will do:

1. Assist in the preparation of a risk based annual audit plan. Support execution of the audit plan – perform testing on internal controls, financial reporting controls (ICFR, SOX (if applicable), to confirm design and operating effectiveness; assurance reviews on operations, supply chain, group functions, transformation programme, and ESG reporting.
2. Support the planning and execution of internal audits, including walkthroughs, control testing, root cause analysis for deficiencies / findings, documentation in accordance with professional standards and internal methodologies, and timely reporting of findings.
3. Track, monitor, and support the remediation of audit findings, process and control deficiencies, partnering with process owners to ensure timely resolution.
4. Provide support for the documentation and implementation of new or enhanced internal controls, especially in response to regulatory changes or system/process updates.
5. Assess adherence to company policies, regulatory requirements, ethical codes, and anti-bribery/fraud policies.
6. Assist in the maintenance and updating of risk and control matrices (RCM) across financial, operational, and IT processes.
7. Assist in the preparation of periodic audit dashboards for senior stakeholder review.
8. Assist in performing periodic fraud assessment and investigation of fraud incidents including root cause analysis, reporting and tracking of mitigation steps to strengthen the anti-fraud environment aligned with local legislations and US and UK legislations (UK - Anti-Bribery and Corruption Act, Corporate Criminal Offence; US – Foreign Corrupt Practices Act).
9. Support the Enterprise Risk Management (ERM) framework by assisting in regular risk assessments and "deep dives" to identify, assess, and quantify enterprise-wide risks in business units e.g., Finance, IT, HR, Legal, Procurement, Operations, Business Development, and other functions.
10. Partner with business units to understand risks, implement appropriate remediation /mitigation strategies and plans, track actions to ensure timely resolution, and help embed risk management practices.
11. Assist in developing, implementing, and maintaining ERM policies, processes, and tools.
12. Assist in monitoring the Key Risk Indicators (KRIs), maintenance of the enterprise risk register and preparation of periodic reports for senior leadership and board-level committees to support governance over key enterprise risks.
13. Work closely with the central accounting team in Milton Keynes to ensure proper documentation and completion of key accounting activities e.g., Balance Sheet reconciliation.
14. Work and share audit methodology with guest auditors from finance and other teams across the business.
15. Work with the finance and business teams on short term assignments to enhance finance and business knowledge.

Key Qualifications & Skills

1. Professional qualification (ACA, ACCA, CPA or IIA).
2. 3–5 years of experience in internal audit, SOX testing, internal controls testing within finance, operations, IT environments (ITGC), or risk management.
3. Strong understanding of risk management, internal controls, and auditing principles.
4. Proficiency in audit methodologies, testing approaches, and documentation standards.
5. Familiarity with risk and control matrices (RCMs), remediation tracking, and control design assessment.
6. Excellent analytical skills with the ability to identify risks and recommend improvements to risk mitigation.
7. Previous experience in hospitality is desirable but no essential.
8. Strong communication and collaboration skills, with the ability to engage with process owners and senior stakeholders.
9. Problem-solving, critical thinking, and attention to detail.
10. Proficiency in MS Office.
11. Willingness to travel from time to time (20%).