Director, Internal Controls & Risk Management

Lume Deodorant • New York, NY

1d • $170,000 - $180,000 • Hybrid

About The Position

Founded in 2017, Lume is a transformative personal care brand on a mission to normalize body odor beyond pits and provide people with outrageously effective solutions so they don’t have to think twice about odor. We are pioneers of the whole body deodorant category, with a portfolio of odor-blocking products including anti-perspirants, aluminum-free deodorants, body washes, body creams, cleansing bars and laundry sprays. Lume products are OB/GYN developed, made with skin-safe ingredients that are gentle enough for the most sensitive parts and often referred to as “life-changing” by our customers. In late 2022, we launched a men’s line called Mando, bringing our expertise to the men’s personal care category. From whole body deodorants to body washes, our product offerings arm men with the confidence to show up as their best selves as they move about their busy day.
Lume and Mando are part of Mammoth Brands, the modern CPG company behind category-leading brands Harry’s, Flamingo, Lume, Mando, and Coterie. Driven by a mission to “Create Things People Like More,” the company is creating a new model—and home—for brands, founders, and talent looking to solve unmet needs, improve peoples’ lives and ultimately change the status quo. Even as we grow, we take extra care to maintain the small, scrappy, entrepreneurial culture that helped to get us where we are today: a company that people like more, that better serves its customers, employees, and community. Mammoth Brands is committed to making a positive impact and donated over $20 million through our network of nonprofit partners to date.
We build brands that move fast and think big — and we hire people who are curious about AI, willing to experiment with it in their day-to-day work, and excited to accelerate what's possible. We prioritize giving our team the tools, training, and space to build real fluency, so you grow alongside the technology and help shape how we use it.
The Accounting and Finance team collaborates as a strategic partner to every department across Mammoth Brands. We sell our products around the world through multiple channels, with on-the-ground teams and offices in New York, the United Kingdom, and Germany. As our revenue grows, so does the complexity of how we operate — and we need an experienced leader to help build the internal controls and risk management infrastructure that lets the rest of the business move fast with confidence.
We're looking for someone to lead and grow our internal audit, risk management and governance function — and to do it in a way that makes people across the business genuinely glad you're here. This is a role for someone who knows that the best compliance programs don't slow companies down; they make them more fearless.
You'll inherit a SOX program with real momentum: we’ve already laid the groundwork and we have a clear-eyed view of what's left to build. The controls framework is maturing, a GRC implementation is underway, and there's an opportunity to bring modern audit automation into the function. But this role is bigger than SOX. You'll also own our enterprise risk management program — maturing how we identify, assess, and respond to risk across the business — and serve as a key voice in our governance infrastructure, from disclosure committee to audit committee reporting. We need the right leader to accelerate all of it — and to bring our Finance, IT, Operations, and Legal partners along with genuine enthusiasm, not reluctant compliance.
As Mammoth grows — through new channels, new markets, and acquisition — the business will evolve, and this function will have to evolve right alongside it. That means the controls that work today may need to be redesigned tomorrow, and the risks we're managing now will look different in two years. We need someone who sees that as exciting, not exhausting.

Requirements

• You make people want to prioritize controls — at every level. From the CFO and audit committee to the IT manager who owns a key system, you know how to frame risk in a way that drives decisions and earns ownership. You have a real playbook for this, and a track record of making compliance feel like an enabler, not a burden, even in fast-moving, dynamic environments.
• You're a builder who thrives without a blueprint. You've designed programs from scratch, know how to sequence what to tackle first, and don't wait for perfect conditions to make progress.
• You communicate up and across with equal clarity. Whether it's an audit committee presentation or a working session with an IT system owner, you translate complex risk into language that lands.
• You know your way around ITGCs, GRC tools, and audit technology. You have hands-on experience with complex and evolving tech stacks including SAP S4 Hana, Netsuite, Shopify, Microsoft Entra, GitHub, Data Dog, Google Cloud Platform .
• You’re excited about the opportunity to build a modern-day AI forward Internal Audit function. The landscape for compliance is changing and you want to be at the forefront of this.
• You balance accountability with empathy. Clear on expectations and timelines, collaborative in how you get there. You can hold the line and navigate difficult conversations while maintaining strong crossfunctional relationships.

Responsibilities

• Earn the room. Build a trusted, credible internal audit presence that Finance, IT, and Operations partners want to engage, collaborate with and learn from. Along the way, you will effectively manage relationships with co-source partners and external auditors.
• Mature our SOX program. Evaluate our risk-based internal audit plan, close any control gaps and evolve our controls testing from early-stage to a repeatable, scalable annual cycle with expanded coverage and clean external auditor coordination
• Be a thought partner on control design. As the business grows — including through acquisition — sit at the table early to help design key controls that are risk-adjusted, scalable, and built to move with the business rather than slow it down. The goal isn’t perfect controls; it’s the right controls at the right time.
• Key stakeholder in our GRC implementation. Drive the design and rollout of a GRC program on our ERP, bringing best practices and ensuring the tool becomes something the business actually uses and trusts.
• Bring AI and automation to internal audit. Evaluate and implement AI-driven audit tools to increase testing efficiency, reduce manual work, and position our audit function as a model for what modern, tech-forward internal audit looks like.
• Own our governance cadence. Run quarterly disclosure committee meetings, prepare audit committee materials, and coordinate across Legal, Finance, and leadership to ensure our reporting is timely, accurate, and board-ready.
• Expand our ERM program. Build on our existing enterprise risk management foundation — maturing our risk assessment process so it meaningfully informs both the audit plan and business decisions.

Benefits

• Medical, dental, and vision coverage
• 401k match
• Equity in Mammoth Brands
• Flexible time off and working hours
• L&D stipend
• 4 weeks sabbatical after 5 years, 6 weeks after 10 years, and 8 weeks after 15 years
• 20 fully paid weeks off for parents who give birth, or 16 fully paid weeks off for all other paths to parenthood
• Fun IRL and virtual events including happy hours, team building events, and parties on our rooftop
• Free products from our family of brands

What This Job Offers

• Job Type: Full-time
• Career Level: Director
• Education Level: No Education Listed