Internal Audit

About Us
Belema Fintech is a financial technology company focused on building secure and seamless digital payment solutions. Our core products Belema Payment Switch, BelemaPay (payment gateway), Virtual Accounts, and Belcoba (core banking application) simplify and enhance digital transactions for businesses and individuals.

1. Role Purpose

The Internal Auditor provides independent, objective assurance and advisory support to Belema Fintech's leadership on the effectiveness of governance, risk management, and internal controls. Working closely with the Head of Risk & Compliance, the Internal Auditor plans and executes risk-based audits across the business, tests compliance with CBN and other regulatory requirements, and drives timely remediation of findings, so that Belema can scale its products safely, protect customer funds and data, and maintain the trust of regulators, partners, and customers.

2. Key Responsibilities

Audit Planning and Execution

• Develop and maintain a risk-based annual internal audit plan aligned with Belema's strategy, risk register, and regulatory obligations.
• Plan and execute operational, financial, compliance, and IT audits across payments, lending/wallet operations, customer onboarding (KYC/AML), finance, HR, procurement, and engineering functions.
• Define audit scope and objectives, document process walkthroughs, design test procedures, and gather sufficient, reliable evidence.
• Carry out sample testing and data analysis to evaluate the design and operating effectiveness of controls.

Regulatory Compliance Assurance

• Assess adherence to applicable regulations and guidelines, including CBN requirements for payment service and fintech operators, AML/CFT obligations, the Nigeria Data Protection Act (NDPA), and relevant NDPC guidance.
• Review compliance with PCI DSS, ISO 27001 controls, and other applicable standards where relevant to Belema's licences and partnerships.
• Support the Head of Risk & Compliance in preparing for regulatory examinations, external audits, and partner due diligence reviews.

Risk and Control Evaluation

• Contribute to the identification, assessment, and monitoring of operational, fraud, financial, technology, and third-party risks.
• Evaluate the adequacy of fraud prevention, transaction monitoring, reconciliation, settlement, and access-control processes.
• Review vendor and third-party arrangements for control and compliance gaps.
• Assess business continuity, incident response, and information security controls in collaboration with Engineering and Security teams.

Reporting and Remediation

• Prepare clear, evidence-based audit reports with risk-rated findings, root causes, and practical recommendations.
• Agree management action plans with process owners, set realistic deadlines, and track closure of audit findings.
• Present audit results and trends to the Head of Risk & Compliance, executive management, and (as required) the Board or Audit Committee.
• Maintain an audit issues log and report on overdue or recurring findings.

Advisory and Continuous Improvement

• Advise teams on control design for new products, features, and process changes before launch.
• Recommend improvements to policies, procedures, and the internal control framework.
• Promote a culture of risk awareness, accountability, and compliance across the organisation.
• Maintain audit methodology, working papers, templates, and documentation standards.

3. Key Interfaces

• Internal: Head of Risk & Compliance (primary), CEO/MD, Finance, Operations, Engineering and Product, Information Security, HR, Legal.
• External: External auditors, regulators (e.g. CBN, NDPC), banking and processing partners, and third-party service providers.

4. Qualifications and Experience Essential

• Bachelor's degree in Accounting, Finance, Economics, Business Administration, Information Systems, or a related field.
• 3 to 5 years' experience in internal audit, risk, compliance, or external audit, ideally within fintech, banking, or financial services.
• Working knowledge of the Nigerian regulatory environment for financial services and payments.
• Solid understanding of internal control frameworks (COSO), risk-based auditing, and the IIA International Professional Practices Framework.
• Professional certification, or active progress towards one: ACA/ACCA, CIA, CISA, CFE, or ICAN.

Desirable

• Experience auditing digital payment, wallet, lending, or API-based products.
• Exposure to IT general controls, cybersecurity, and data privacy audits.
• Experience with data analytics tools (Excel, SQL, Power BI) and audit or GRC software.
• Familiarity with AML/CFT, KYC, fraud risk, and PCI DSS requirements.

Pay: From ₦700,000.00 per month

Work Location: Hybrid remote in Lekki