Position: Manager – Internal Audit, Risk & Control Governance Qualification Required: Chartered Accountant (CA)

Experience: 5+ years (post-qualification) Industry: MedTech / Healthcare Technology (Private Equity Backed) Location: Navi Mumbai Reporting To: CFO Employment Type: Full-Time About the Company

Lattice MedTech is a fast-growing, PE-backed MedTech company focused on distribution and manufacturing of medical devices, diagnostics, digital health solutions, It’s backed by a leading private equity investor, the company is scaling operations across India and outside India and is committed to building institutional-grade financial discipline, regulatory compliance, and governance frameworks to support its next phase of growth, M&A;, and eventual exit readiness. Role Overview

We are looking for a qualified Chartered Accountant with robust experience in Standard Operating Procedure (SOP) design, internal audit execution, and enterprise risk & control governance. This is a critical role supporting the CFO's office and the PE investor's governance requirements — ensuring the organization has robust, auditable, and scalable processes as it grows. The ideal candidate has worked in a high-growth, PE/VC-backed, or audit environment and understands the heightened compliance expectations (regulatory, quality, and financial) inherent to the medtech/healthcare sector.

Key Responsibilities

- SOP Design & Documentation

Draft, review, and implement SOPs across finance, procurement, sales, inventory, HR, and cross-functional processes.

Map existing "as-is" processes, identify control gaps, and redesign "to-be" workflows aligned with best practice and regulatory requirements (e.g., ISO 13485, quality management systems where applicable).

Maintain a centralized SOP repository with version control, periodic review cycles, and sign-off governance.

Partner with functional heads to ensure SOPs are practical, adopted, and embedded into daily operations (not just documented).





2.

Internal

Audit

Develop and execute the annual internal audit plan (risk-based), covering financial, operational, and compliance areas.

Conduct process walkthroughs, control testing, and transaction-level audits; identify control weaknesses, leakages, and non-compliance.

Draft clear, actionable audit reports with root-cause analysis and practical recommendations.

Track management action plans (MAPs) to closure and report status to the Audit Committee/Board.

Coordinate with statutory auditors, and external consultants during audits and due diligence exercises.

- Risk Management & Control Governance

Build and maintain the Enterprise Risk Register; identify, assess, and prioritize financial, operational, regulatory, and reputational risks.

Design and monitor Internal Financial Controls (IFC) framework in line with Companies Act / investor governance requirements.

Conduct control self-assessments (RCSA) with process owners and drive remediation of identified gaps.

Support fraud risk assessment, whistleblower mechanism oversight, and investigation support as required.

Prepare periodic risk dashboards and governance reports for CFO, Audit Committee, and PE investor reporting requirements.

4.

Governance

Support

Support quarterly/annual board and investor reporting on internal controls, compliance status, and audit findings.

Liaise with legal, compliance, and quality/regulatory teams to ensure SOPs and controls address sector-specific regulatory requirements Key Requirements

Qualification

Chartered Accountant (CA) — mandatory.





Additional certifications such as CIA, CISA, or DISA are a plus. Experience:

5+ years post-qualification experience, with a strong mix of: Internal audit (Big 4 / consulting firm or in-house internal audit function), and/or

Corporate roles involving SOP drafting, IFC/risk management, or controllership.

Prior exposure to PE/VC-backed companies, or companies preparing for institutional investment/exit, shall be preferred.

Experience in medtech, pharma, healthcare, or a regulated manufacturing environment is highly desirable.

Skills & Competencies:

Strong understanding of internal financial controls, COSO framework, and risk management methodologies.

Excellent process-mapping and documentation skills (flowcharts, RACI, control matrices).

Strong analytical and investigative mindset with attention to detail.

Ability to work independently, manage ambiguity, and build processes from scratch in a scaling organization.

Strong stakeholder management Proficiency in MS Excel, PowerPoint; exposure to ERP systems (SAP) and audit tools is a plus.

High integrity, sound judgment, and ability to handle sensitive/confidential information.

What Success Looks

Like (First 12 Months)

A documented, board-approved SOP library covering critical business processes.

A functioning risk-based internal audit calendar with completed cycles and closed action items.

A live enterprise risk register reviewed periodically with the CFO/Audit Committee.

Demonstrable improvement in control maturity ahead of investor reviews, due diligence, or audit cycles.

Why Join

Us

Opportunity to build governance and control frameworks from the ground up in a high-growth, PE-backed medtech company.

Direct visibility and exposure to CXOs Meaningful role in a company at an inflection point — scaling operations, preparing for future growth To apply, share resumes at [email protected]

📌 Manager – Internal Audit, Risk & Control Governance (Navi Mumbai)
🏢 Lattice Medtech
📍 Navi Mumbai