Director, Internal Audit at Shift4 in Valletta, Malta

Director, Internal Audit

Location: Valletta, Malta · Hybrid

Shift4 (NYSE: FOUR) is boldly redefining commerce by simplifying complex payments ecosystems across the world. As the leader in commerce-enabling technology, Shift4 powers billions of transactions annually for hundreds of thousands of businesses in virtually every industry. For more information, visit www.shift4.com.

Director, Internal Audit — Global Regulatory Assurance (Malta Financial Institution License)

The Director, Internal Audit — Global Regulatory Assurance leads the Company's regulatory assurance audit team, based in Malta, with primary accountability as the MFSA-approved Internal Audit Key Function Holder for the Company's Financial Institution (FI) license issued by the Malta Financial Services Authority (MFSA) under the Financial Institutions Act. As an independent control function, the role reports directly into the Board's Audit and Risk Committee, and functionally into the VP, Internal Audit, at group level.

The role owns and executes the EU Regulatory vertical's multi-year risk-based audit plan, manages a Malta-based audit team, and reports audit results and remediation status directly to the Risk & Audit Committee each quarter. The role is the named individual accountable to the MFSA for the Internal Audit function as a Key Function Holder and Appointed Person, subject to MFSA approval and to meeting ongoing fitness and properness requirements.

Major Tasks, Responsibilities, and Key Accountabilities

Regulatory Assurance Audit Program & Team Leadership

• Own the annual risk-based Internal Audit Plan (EU vertical).

• Ensures the Internal Audit Plan is approved annually by the Risk & Audit Committee and is executed by the Internal Audit team throughout the calendar year.

• Review and approve engagements executed by team members, including audit plans, scoping working papers, control assessment matrices, and testing evidence.

• Supervise fieldwork and ensure timely completion of assigned audits.

• Manage audit escalations and disagreements to ensure outcomes align with Company risk tolerance and regulatory expectations.

• Track regulatory guidance, circulars, and rule changes issued by the MFSA, EBA, and European Commission, and assess implications for the internal audit universe and risk assessment.

• Lead or support Internal Audit advisory engagements, complex or cross-functional engagements directly.

Audit Reporting & Quality

• Own reporting, ensuring every report includes defined scope, work performed, conclusion, and control appendices, and states the legal/regulatory basis for regulation-governed engagements.

• Sign all Internal Audit reports as the approved auditor (Malta) and confirm regulatory citations are accurate before issuance.

• Ensure the program aligns with the Global IIA’s Standards including IIA Topical Requirements.

Risk & Audit Committee Reporting

• Prepare and present the quarterly Internal Audit Update to the Risk & Audit Committee (Malta), covering audit plan progress, findings and recommendations, MFSA inspection status, advisory project status, and audit technology and process improvements.

• Coordinate reporting cadence and content with the VP, Internal Audit to ensure consistency between what is reported to the Risk & Audit Committee (Malta) and what is reported into the Board.

Team Leadership

• Set expectations for technical excellence, professional skepticism, and independence within the regulatory assurance team.

• Participate in Internal Audit's broader talent development, succession planning, and resourcing strategy alongside the VP, Internal Audit and the Director, Global SOX Compliance.

• Develop and maintain a positive, productive, collaborative professional relationship with the MLRO, IT, Risk, Legal, and Operations functions.

MFSA Key Function Holder — Internal Audit

• Maintain continuous fitness and properness in line with MFSA's Fit and Proper Framework.

• Maintain the independence of the Internal Audit function from first and second line operational responsibilities, with unrestricted access to records, systems, and personnel, direct access to the Risk & Audit Committee and the Board.

• Issue recommendations based on audit work performed, verify compliance with those recommendations, and report on internal audit matters to the Risk & Audit Committee (Malta).

• Serve as the Internal Audit point of contact during MFSA onsite inspections, including remediating findings raised against the Internal Audit function itself.

• Track open regulatory and audit findings to closure.

• Cooperate with the MFSA in an open and honest manner in respect of internal audit matters, providing information, documentation, and audit reports upon request.

• Support the Company's responses to MFSA inspections and thematic reviews where internal audit findings, audit methodology, or the internal audit plan are in scope.

Audit Technology & Process Improvement

• Serve as the EU Regulatory vertical's lead for the OPTRO (formerly AuditBoard) audit management platform, used end-to-end across planning, fieldwork, reporting, and issue tracking.

• Support, in an advisory capacity consistent with Internal Audit independence, control-mapping work linking ERM controls into OPTRO and aligning shared controls to SOX so they are tested once across SOX, ERM, and Internal Audit, reducing duplicate testing effort.

• Champion innovation, including data analytics, continuous monitoring, and technology-enabled controls.

Essential Qualifications

Required

• Degree in accountancy (or related field).

• Professional qualification such as CIA, CISA, CAMS (or similar).

• 10+ years of progressive experience in internal audit, external audit, or risk management within financial services, including prior service as an MFSA-approved Key Function Holder or equivalent regulated function holder.

• Demonstrated, hands-on experience auditing a Payment Institution, Electronic Money Institution, or comparable EEA-licensed financial services firm.

• Prior experience presenting directly to Boards, Audit Committees, or regulatory authorities.

• Experience managing and developing a team (2+ direct reports).

Preferred

• Experience overseeing complex ERP and financial system environments (e.g., Oracle Fusion, NetSuite, SAP, BlackLine).

• Exposure to continuous auditing, data analytics, and audit management platforms.

• SOX exposure a plus.

Benefits of working for Shift4:

Join Shift4 and enjoy a work environment that prioritizes flexibility and well-being. We embrace a hybrid working model, offering our team the flexibility to balance time between remote work and our modern, welcoming offices located in the heart of Valletta, Malta's historic capital.

Our standard remuneration package is comprehensive, including private health, dental, and life insurance, as well as parking allowance, preferential home rates, and a company pension plan (with APS). We are committed to supporting our employees' well-being through our Mental Health Program, family-friendly measures, an equipped canteen with free breakfast, and exciting company events.

We are an Equal Opportunity Employer and do not discriminate against any employee or applicant for employment because of race, color, sex, age, national origin, religion, sexual orientation, gender identity and/or expression, status as a veteran, and basis of disability or any other federal, state or local protected class.