The job holder’s role is to provide management with assurance on the control environment in the business through the control testing First Line of Defence (FLOD) methodology. The jobholder is expected to be responsible for the robustness of all Risk Management governance within the business in line with the Enterprise Risk Management Framework.

Duties and Responsibilities

Membership management

• Deliver a comprehensive Control assurance review program plan covering all the key business requirements and ensuring that any gaps in the review process are identified and escalated.
• Manage and oversee the testing of Control Assurance review areas as per the FLOD methodology.
• Carry out reviews professionally and consistently produce a high standard of documentation i.e. evidence and in the agreed timelines with the business stakeholders.
• Conducting annually planned and contracted reviews across all business functions with the highest level of professionalism.
• Assessing how well the business is complying with rules and regulations and informing management whether any issues need escalations.
• Conducting unplanned/ad-hoc reviews in terms of a specific need and expectation received from Executive/Senior Management within the business units.
• Effective tracking, monitoring and closure of CT findings arising from planned/ Ad-hoc reviews.
• Ensuring that all Significant Control and Material Issues are being managed effectively and efficiently across the business.
• Ensure Root causes are effectively identified and lessons learnt are embedded.
• Provide, where appropriate, independent evaluations of the business risk profile to the senior management, local board, and regulators.
• Support business in control agenda by attending and enhancing business control meetings.
• Undertaking control awareness on control management to identified officials across the business.

Qualification/Preferences

• B-degree in Computer Science
• Formal qualification or studying for ACIB, CPA, CIA, CISA, CCSA and or business or risk related degree / qualification.
• Experience within a banking environment
• Report writing and presentation experience.
• Exposure to consultation and facilitation.
• IT software Audit tools and techniques
• Stakeholder management and negotiation experience
• Stakeholder management and negotiation experience
• Auditing/Assurance/Risk/Rigour and investigative skills under a risk-based methodology
• Understanding of key risks faced by banks and core control environment
• Penetration testing/Red teaming
• Full stack web development (MERN)
• Microsoft office suite(word ,excel, PowerPoint)
• Project management (Agile)