Piyushi Mathur

I've led risk-based internal audit and enterprise risk work for PPHE Hotel Group across UK and Netherlands hotel operations and corporate functions. My reviews have covered financial controls, ITGCs, cybersecurity, business continuity, disaster recovery, procurement, ESG reporting and governance.

At PPHE, I directed ESG assurance work that identified material control and data-quality deficiencies across Scope 1, 2 and 3 emissions reporting, supporting restated sustainability disclosures and stronger governance ahead of CSRD requirements. I also helped select and implement Hyperproof, migrating audit, risk, control and findings data into a scalable GRC framework.

Previously at Deliveroo, I helped establish and scale a new internal audit function, developed risk-based audit plans, and led audits across restaurant lifecycle, payroll, financial reporting and expenses. At EY, I delivered internal audit, SOX, controls and compliance reviews for clients including Microsoft, while leading teams and improving controls across third-party risk, spend management, HR, privacy and sales execution.

I'm a Certified Fraud Examiner who enjoys turning complex control issues into practical, commercially focused recommendations for executive leadership and Audit Committees. I also coach auditors, strengthen audit methodology through QAIP, and help organisations build resilient governance and risk frameworks.