Overview

Shift4 (NYSE: FOUR) is boldly redefining commerce by simplifying complex payment ecosystems across the world. As the leader in commerce-enabling technology, Shift4 powers billions of transactions annually for hundreds of thousands of businesses in virtually every industry.

The Director of Internal Audit and Global Regulatory Assurance leads the Company's Regulatory Assurance Audit team, based in Malta, with primary accountability as the MFSA-approved Internal Audit Key Function Holder for the Company's Payment Institution (PI) license issued by the Malta Financial Services Authority (MFSA) under the Financial Institutions Act. The role reports functionally to the VP, Internal Audit, based in Centre Valley, Pennsylvania, USA.

The role owns and executes the EU Regulatory vertical's multi-year risk-based audit plan, manages a Malta-based audit team, and reports audit results and remediation status directly to the Risk and Audit Committee each quarter. The role is the named individual accountable to the MFSA for the Internal Audit function as a Key Function Holder and Appointed Person.

Responsibilities will include:

Regulatory Assurance Audit Program and Team Leadership

Own the annual risk-based Internal Audit Plan (EU vertical).

Review and approve engagements executed by team members, including audit plans, scoping working papers, control assessment matrices, and testing evidence.
Supervise fieldwork and ensure timely completion of assigned audits.
Manage audit escalations and disagreements to ensure outcomes align with Company risk tolerance and regulatory expectations.
Track regulatory guidance, circulars, and rule changes issued by the MFSA, EBA, and European Commission, and assess implications for the internal audit universe and risk assessment.
Lead or support Internal Audit advisory engagements, complex or cross-functional engagements directly.
Audit Reporting and Quality

Own reporting, ensuring every report includes defined scope, work performed, conclusion, and control appendices, and states the legal/regulatory basis for regulation-governed engagements.

Sign all Internal Audit reports as the approved auditor (Malta) and confirm regulatory citations are accurate before issuance.
Ensure the program aligns with the Global IIA Standards, including IIA Topical Requirements.
Risk and Audit Committee Reporting

Prepare and present the quarterly Internal Audit Update to the Risk and Audit Committee (Malta), covering audit plan progress, findings and recommendations, MFSA inspection status, advisory project status, and audit technology and process improvements.

Coordinate reporting cadence and content with the VP, Internal Audit to ensure consistency between what is reported to the Risk and Audit Committee (Malta) and what is reported into the Board.
Team Leadership

Set expectations for technical excellence, professional scepticism, and independence within the Regulatory Assurance team.

Participate in Internal Audit's broader talent development, succession planning, and resourcing strategy alongside the VP, Internal Audit and the Director, Global SOX Compliance.
Develop and maintain a positive, productive, collaborative professional relationship with the MLRO, IT, Risk, Legal, and Operations functions.
MFSA Key Function Holder — Internal Audit

Maintain continuous fitness and properness in line with MFSA's Fit and Proper Framework.

Issue recommendations based on audit work performed, verify compliance with those recommendations, and report on internal audit matters to the Risk and Audit Committee (Malta).
Serve as the Internal Audit point of contact during MFSA onsite inspections, including remediating findings raised against the Internal Audit function itself.
Track open regulatory and audit findings to closure.
Cooperate with the MFSA in an open and honest manner in respect of internal audit matters, providing information, documentation, and audit reports upon request.
Support the Company's responses to MFSA inspections and thematic reviews where internal audit findings, audit methodology, or the internal audit plan are in scope.
Audit Technology and Process Improvement

Serve as the EU Regulatory vertical's lead for the OPTRO (formerly AuditBoard) audit management platform, used end-to-end across planning, fieldwork, reporting, and issue tracking.

Support control-mapping work linking ERM controls into OPTRO and aligning shared controls to SOX so they are tested once across SOX, ERM, and Internal Audit, reducing duplicate testing effort.
Champion innovation, including data analytics, continuous monitoring, and technology-enabled controls.

The ideal candidate will bring:

Degree in accountancy (or related field).
Professional qualification such as CIA, CISA, CAMS (or similar).
10+ years of progressive experience in internal audit, external audit, or risk management within financial services, including prior service as an MFSA-approved Key Function Holder or equivalent regulated function holder.
Demonstrated, hands-on experience auditing a Payment Institution, Electronic Money Institution, or comparable MFSA-licensed entity, including direct engagement with MFSA supervisors on audit matters.
Prior experience presenting directly to Boards, Audit Committees, or regulatory authorities.
Experience managing and developing a team (2+ direct reports).

Preferred

Experience overseeing complex ERP and financial system environments (e.g., Oracle Fusion, NetSuite, SAP, BlackLine).
Exposure to continuous auditing, data analytics, and audit management platforms.
SOX exposure is a plus.

Benefits of working for Shift4

Join Shift4 and enjoy a work environment that prioritises flexibility and well-being. We embrace a hybrid working model, offering our team the flexibility to balance time between remote work and our modern, welcoming offices located in the heart of Valletta, Malta's historic capital.

Our standard remuneration package is comprehensive, including private health, dental, and life insurance, as well as parking allowance, preferential home rates, and a company pension plan (with APS). We are committed to supporting our employees' well-being through our Mental Health Program, family-friendly measures, an equipped canteen with free breakfast, and exciting company events.

We are an Equal Opportunity Employer and do not discriminate against any employee or applicant for employment because of race, color, sex, age, national origin, religion, sexual orientation, gender identity and/or expression, status as a veteran, and basis of disability or any other federal, state or local protected class.

Director of Internal Audit & Global Regulatory Assurance

Job Description