Manager - Internal Controls & Internal Audit (Group)

Location: Mumbai • Reports to: Group Finance Controller • Scope: Aerem Group

About Aerem Group. Aerem is a Mumbai-based solar platform with three businesses: Sunstore (solar equipment distribution and imports), Aerem Solutions (EPC and direct-to-consumer rooftop installation) and NetZero Finance (an RBI-registered NBFC financing solar). Finance is being built out at group level, with ERPNext going live as the single system of record from April 2027.

Role purpose. Build and run the group's internal controls and internal audit function across all three entities. You will design controls into processes and systems as they are built, test that they work, and give management and the Audit Committee an independent view of risk.

Key responsibilities

1. Internal financial controls (IFC)

- Own the group risk-control matrices across key cycles: procure-to-pay, order-to-cash, inventory, project accounting, lending, treasury, payroll and financial close.
- Embed controls into ERPNext as it is built: approval workflows, segregation of duties, access rights, system validations.
- Plan and perform IFC design and operating-effectiveness testing; support statutory auditors' IFC and CARO reporting.

1. Internal audit

- Prepare a risk-based annual internal audit plan for the group and get it approved by the Management.
- Execute audits in-house and manage co-sourced or outsourced internal auditors where used.
- Track management action plans to closure, including open observations from prior internal audit reports.
- Report findings and status to the Group Finance Controller and the Audit Committee.

1. Entity-specific focus

- Sunstore: inventory and warehouse controls, import and forex processes, channel partner and credit controls.
- Aerem Solutions: project costing, vendor and subcontractor controls, revenue and collections on installations.
- NetZero Finance:



loan origination and disbursement controls on the lending platform, KYC and credit process adherence, and alignment with RBI expectations for NBFC internal audit and compliance.

1. Policies and governance

- Draft and maintain finance policies and SOPs with versioning, effective dates and delegation of authority.
- Run fraud-risk and related-party/intercompany reviews.

1. Data analytics

- Use full-population data analytics rather than sampling where possible: duplicate payments, vendor-master anomalies, journal-entry testing, access and SoD conflicts.
- Build repeatable continuous-monitoring reports on ERPNext data.

Qualifications and experience

- Chartered Accountant (ICAI), mandatory. CIA or CISA a plus.
- 58 years post-qualification in internal audit, risk advisory or IFC/SOX work.
- Big 4 or reputed risk-advisory background preferred, ideally with some time in industry.
- Preferred: NBFC or financial services audit exposure plus one of manufacturing, distribution or EPC.
- Exposure to ERP controls and IT general controls; experience in a system implementation is a strong plus.

Skills

- Data management: strong Excel and Power Query; IDEA, ACL, Power BI, SQL or Python for audit analytics.
- Business partnering: designs controls that work for the business, not just for audit; earns trust from operations and sales teams.
- Robust knowledge of Companies Act requirements on internal audit and IFC, CARO, Indian GAAP and RBI regulations for NBFCs.
- Clear, concise reporting to senior management and the Audit Committee.

What success looks like in the first 12 months

- Group risk-control matrices documented for all key cycles.
- ERPNext controls designed and tested before go-live on 1 April 2027.
- Risk-based internal audit plan for FY 2027-28 approved by the Audit Committee.
- Prior-year internal audit observations tracked to closure.
- At least one continuous-monitoring analytic running monthly.

📌 Manager - Internal Controls & Internal Audit (Mumbai)
🏢 Aerem
📍 Mumbai