Group Internal Control Manager

• The Group Internal Control Manager is responsible for establishing, implementing, and maintaining a robust Group-wide internal control framework that supports effective governance, operational efficiency, financial integrity, regulatory compliance, and achievement of Ceviant Group's strategic objectives.

Role Responsibilities
Group Internal Control Framework:

• Develop, implement and continuously improve Ceviant Group's internal control framework.
• Establish Group-wide internal control standards, principles, methodologies and guidelines.
• Ensure appropriate controls are embedded within key business and support processes across the Group.
• Establish a consistent approach to control identification, assessment, testing, monitoring, reporting and remediation.
• Ensure the control framework remains appropriate as the Group's businesses, products, systems and regulatory obligations evolve.
• Promote a strong culture of control ownership, accountability and risk awareness across the Group.

Control Governance & Oversight:

• Provide Group-level oversight of the effectiveness of internal controls across subsidiaries and critical functions.
• Define minimum control requirements for critical Group processes.
• Establish appropriate control ownership and accountability across business and functional teams.
• Ensure significant control weaknesses are identified, documented, escalated, and addressed.
• Provide management with independent challenge on the adequacy of controls, while maintaining the appropriate distinction between control ownership and assurance.
• Ensure appropriate segregation of duties, approval authorities, and access controls are maintained across critical processes.

Risk & Control Assessment:

• Lead periodic Group-wide risk and control assessments.
• Ensure critical business processes have documented Risk & Control Matrices (RCMs).
• Identify key control points, control gaps, process vulnerabilities, and areas of excessive reliance on manual controls.
• Assess the design and effectiveness of controls against identified operational, financial, technology and regulatory risks.
• Work with management to determine appropriate mitigating controls for identified risks.
• Ensure control assessments are updated when processes, systems, products, organisational structures, or regulations change significantly.

Control Testing & Monitoring:

• Establish a risk-based control testing and monitoring framework.
• Approve and oversee annual control testing plans for critical processes.
• Review the results of control testing and assess the significance of identified exceptions.
• Monitor the operating effectiveness of key controls across Group entities.
• Identify recurring control failures and systemic weaknesses.
• Ensure material control deficiencies are escalated to appropriate levels of management.
• Use data and management information, where available, to strengthen continuous control monitoring.

Control Remediation & Issues Management:

• Establish a formal Group-wide process for tracking control deficiencies and remediation actions.
• Ensure control issues have clearly defined owners, corrective actions, and target completion dates.
• Monitor remediation of high-risk and recurring control deficiencies.
• Challenge management where proposed remediation actions do not adequately address the root cause.
• Validate the effectiveness of remediation actions before considering significant control issues closed.
• Escalate overdue or material control issues to Executive Management and relevant governance committees.

Policies, Processes & Standard Operating Procedures:

• Oversee the review of key Group policies, procedures and SOPs from an internal control perspective.
• Ensure key processes have clearly defined roles, responsibilities, approval points and control activities.
• Promote standardisation of controls across the Group where appropriate.
• Ensure control requirements are considered when new policies, processes, products or systems are introduced.
• Identify opportunities to simplify or automate controls without compromising the control environment.

Required Qualifications & Experience

• Bachelor's Degree in Accounting, Finance, Economics, Business Administration, Risk Management or a related discipline.
• Minimum 7 years of relevant experience in internal control, risk management, internal audit, compliance, financial control or a related field.
• Professional qualification such as ACA, ACCA, CIA, CISA, CRMA, or equivalent is an advantage.
• Experience within financial services, fintech, payments, banking or another regulated environment is strongly preferred.
• Experience in developing and implementing Risk & Control Matrices and control testing programmes.
• Experience working across multiple business units, subsidiaries or entities is an advantage.
• Strong understanding of process controls, segregation of duties, operational risk and control frameworks.
• Experience with regulatory and assurance environments is desirable.

Technical Competencies:

• Internal Control Frameworks
• Risk & Control Assessment
• Risk & Control Matrix (RCM) Development
• Control Testing & Evaluation
• Process Mapping & Documentation
• Operational Risk Management
• Policy & SOP Review
• Issues & Remediation Management
• Segregation of Duties
• Regulatory & Compliance Controls
• Data Analysis & Management Reporting
• Audit & Assurance Coordination

Why Join Us?

• At Ceviant, we are redefining financial services through our core values of Client Service, Integrity, Excellence, and Partnership. As a Senior Internal Control Officer, you will play a key role in strengthening our internal controls, managing risks, and ensuring compliance across the organization.

Method of Application
Interested and qualified candidates should send their CV to: [email protected] using the “Group Internal Control Manager” as the subject of the email.