Audit and Risk Officer

Purpose of the position

To execute risk and internal audit reviews under the guidance of the GRCL Executive in NNG. Carry out internal audit work as assigned in line with the standards and methodologies set by IAS. This role also performs analysis on risk and internal controls, providing recommendations on improvements. The risk officer needs to identify, evaluate, monitor, investigate and aid the Management to improve controls within the business to mitigate and eliminate any potential risk within the business.

Internal audit

Work with the engagement manager in the delivery of internal audit engagements under the MCG audit plan. Assist in ensuring close involvement in the updated internal audit alignment process in support of management. Drive the right behavior through the tracking of all internal audit reports ensuring the timeous resolution of findings. Build a relationship with operational staff within the business. Build business acumen by gaining an in-depth understanding of business processes under review. Execute allocated tasks throughout the engagement lifecycle, including documenting risk control matrices, audit procedures, working papers and audit findings. Communicate effectively verbally or in writing. Deliver quality work products in line with IAS standards and methodology. Participate and provide inputs in internal meetings. Keep management team appraised on the progress and any concerns with assigned engagements.

Risk implementation and the internal control environment

Support management with the maintenance and improvement of the internal control environment and resolution of identified weaknesses. Maintenance of the risk register - Actions and controls added to each risk. Assist in improving the awareness and effectiveness of ERM in the group by supporting the entrenchment of risk management disciplines into operational processes. Provide guidance on the implementation of appropriate process and governance controls to remediate identified risks. Facilitate and support risk identification processes, evaluations, assessments, reporting and monitoring. Support governance processes, such as improvements in policies, procedures, and decision-making. Review all NNG policies and SOPs in line with the Policy Framework, ensuring that the correct level of review and approval was obtained, that the correct templates were used and that possible gaps are addressed where identified. Facilitate the follow-up of remediation of assurance provider findings and reporting. Support the third-party risk management (TPRM) process. Perform ongoing monitoring and in collaboration with 1st line, determine that appropriate remediation measures are implemented and approved. Assist with training modules and ensure communication on TPRM is sent out when required. Work closely with other assurance providers (i.e. Internal Audit, Compliance, Forensics etc.) to ensure an effective combined assurance approach is being taken to mitigate risk.

Qualifications:

Essential

Bachelor’s degree in Internal Audit or similar. Must have at least 3-4 years’ professional working experience in risk or internal audit. Process and Control Compliance Monitoring and Reporting. Proficiently skilled in the use of Word and Excel. Experience in the media, copyright, telecoms or related industry would be an advantage.

Technical competencies:
Functional and pragmatic knowledge of risk and quality assessment processes. Understanding the role of policies and procedures in a complex environment.

Behavioral competencies:
Ethical and high levels of personal integrity. Service excellence – seeks the most efficient outcome for the customer. Self-starter and desire to develop as an internal auditor. Strong organisational and time management skills. Ability to excel in working under pressure, adhering to strict deadlines, and getting the job done. Keen interest in career progression.