Internal Audit · SOX · Regulatory Remediation

Built to withstand scrutiny.Not just pass it.

Internal audit, SOX and regulatory advisory for mid-sized companies and financial institutions — delivered with the rigor regulators expect and the practicality management teams need.

Schedule a Conversation → Meet the Principals
Selected Experience
Internal Audit
Programs
SOX & ITGC
SOC 1 &
PCAOB
MRA / MRIA
Remediation
Issue
Validation
FR 2052a
Governance
Audit
Analytics

Founder-led advisory built on 15+ years of hands-on work across global financial institutions and Fortune 500 companies — from risk assessment and testing through remediation and sustainable governance.

15+
Years of practice
Big 4
Firm background
Senior-Led
Delivery model
Large-firm discipline. Founder-led delivery.

Big Four rigor, senior-led delivery

Experienced practitioners lead the work directly, combining disciplined execution with practical solutions tailored to mid-sized companies and financial institutions.

Who We Serve
Financial
Institutions
Mid-Sized
Companies
Public &
Pre-IPO
Regulated
Organizations
Leadership

Senior practitioners who lead the work themselves.

Jobeyer Ahmed, Founder of Aevum Risk Advisory
Founder & Managing Principal

Jobeyer Ahmed, CIA, PMP

Aevum was founded on a straightforward conviction: organizations facing regulatory scrutiny, audit pressure, or governance complexity deserve an advisor with real operational experience — not a junior team behind a senior face.

He brings over 15 years across internal audit, SOX and ITGC controls, MRA/MRIA validation, and regulatory remediation — spanning global banks, insurance firms, and pre-IPO companies — and the pattern recognition that only comes from seeing how programs actually fail under pressure.

  • 15+ Years Experience
  • Former Deloitte Manager
  • Internal Audit & SOX
  • Certified Internal Auditor · PMP
"

Strong governance isn't measured when conditions are easy. It's measured when scrutiny increases.

Jobeyer Ahmed
Founder & Managing Principal
Hira Miah, Principal, Data & Analytics
Principal, Data & Analytics

Hira Miah

  • 18+ years leading audit analytics, data governance and automation initiatives across financial services, consulting and the public sector
  • Former Director of Internal Audit Analytics at Citi, with earlier data analytics and risk advisory experience at Deloitte and current public-sector analytics leadership
  • Technical leader in full-population testing, continuous monitoring, dashboards and automation that strengthen audit coverage and decision-making
  • MBA in Analytics and Digital Marketing from the Gies College of Business; BS in Management of Information and Communications Systems, with a minor in Accounting, from Fordham University
What We Do

Four capabilities. One senior-led team.

Internal Audit Advisory

  • Risk assessment and annual audit planning
  • Co-sourced or fully outsourced internal audit
  • Operational, financial and compliance audits
  • Audit committee reporting and QAIP support

An audit plan that gets delivered, and reporting your audit committee can rely on.

Learn more →

SOX & Controls Advisory

  • SOX readiness for pre-IPO and newly public companies
  • Scoping, walkthroughs, narratives and RCMs
  • Testing, deficiency evaluation and remediation
  • ITGC, SOC 1 and external-auditor coordination

A right-sized SOX program with clear owners that your external auditor can rely on.

Learn more →

Issue Validation & Regulatory Remediation

  • Independent audit and regulatory issue validation
  • MRA / MRIA remediation support
  • Remediation plans and closure packages
  • Examination readiness and regulatory-reporting governance

Defensible evidence and closure that holds up to auditors and examiners.

Learn more →

Data Analytics & Automation

  • Full-population and exception testing
  • Continuous controls monitoring
  • Data-quality analysis and reporting automation
  • Dashboards, workflow and evidence management

Available on its own or embedded in every engagement: broader coverage, sharper insight and reporting that no longer depends on spreadsheets.

Learn more →
Our Approach

A process built
for what comes after.

Most engagements close with a report. Ours close with a program that holds. Each phase is designed so the work is durable, not just deliverable.

01
Assess

Understand the business, its risks, regulatory context, and the evidence standard the organization actually faces.

02
Design

Develop solutions aligned to your goals — controls, governance routines, and remediation plans your team can own.

03
Execute

Deliver with rigor and transparency — testing, documentation, issue closure, and stakeholder-ready reporting.

04
Sustain

Build enduring capabilities — monitoring routines, ownership structures, and governance habits that outlast the engagement.

What sets us apart
Engagement Models
Project-based advisory
Defined scope, deliverables and timeline.
Co-sourced support
Our team alongside yours, scaled to your plan.
Ongoing advisory
Continuing senior support as priorities evolve.
Representative Experience

Where our principals have done this work before.

Work performed by Aevum's principals in prior roles. Client names withheld; not Aevum engagements.

Internal audit execution

Environment
Regulated financial services and other sectors
Challenge
Audit demand beyond in-house capacity
What we did
Led risk-based audits and multidisciplinary teams

Expanded coverage, consistent risk-focused execution

SOX and controls

Environment
Financial services, insurance, utilities, technology
Challenge
Documentation, testing and ownership gaps
What we did
Managed SOX, internal audit and technology-controls programs

More reliable controls over financial reporting

Issue validation and remediation

Environment
Large financial institutions with multiple concurrent MRAs and MRIAs
Challenge
Remediation initiatives needing evidence-based closure
What we did
Built governance, data quality and validation readiness

Validation-ready remediation, sustainable ownership

Regulatory reporting governance

Environment
Large global banking institution under regulatory remediation
Challenge
Gaps in reporting governance, data quality and interpretation
What we did
Strengthened governance, data quality and submission processes

Clear ownership and better-evidenced submissions