Reporting to the Head of Internal Controls, the role provides independent assurance on the adequacy and effectiveness of controls across the Technology, Digital Transformation, and Operations domain.

The role supports to proactively identify and assess operational and emerging risks, evaluate the adequacy of internal controls, and ensure they are maintained at acceptable levels across the domain.

The role also carries responsibility for driving compliance with internal policies and regulatory standards, mitigating emerging risks, and contributing to operational efficiency improvements.

• Plan, prioritize, and coordinate the execution of scheduled and ad hoc control assurance reviews across the domain in liaison with key stakeholders, ensuring full compliance with the approved assurance methodology and annual monitoring plan.
• Ensure timely, high-quality delivery of all assurance reviews in accordance with agreed timelines, scope, and reporting standards.
• Supervise and review the work of Internal Control Officers to ensure conformance with the assurance methodology, including adherence to minimum testing procedures, documentation standards, and quality of outputs.
• Develop, maintain, and continuously improve risk-based monitoring checklists used to assess and report on the adequacy and effectiveness of controls across the Technology, Digital Transformation & Operations Domain.
• Facilitate the periodic validation of control self-assessment tools including Risk and Control Self-Assessments (RCSAs) and Key Risk Indicators (KRIs), ensuring accuracy, completeness, and alignment with the current risk and control environment.
• Proactively assess controls related to new product launches, business initiatives, technology deployments, and process changes to confirm that appropriate controls are designed, tested, and operational both pre- and post-implementation.
• Monitor and validate the remediation of issues arising from internal audits, regulatory reviews, investigations, and control assessments — including independent verification of implemented interventions prior to formal closure.
• Monitor the implementation of risk and compliance management processes, ensuring ongoing adherence to applicable standards, policies, and procedures.
• Oversee effective implementation of the Operational Risk Management Framework across the domain, including loss event management, incident reporting, Business Continuity Management (BCM), and Integrated Risk Management (IRM), in line with the approved framework.
• Lead root cause analysis exercises for control failures and significant risk events, ensuring that systemic issues are identified, appropriate remedial actions are agreed upon, and implementation is tracked to completion.
• Serve as a trusted risk advisor to business and functional teams within the domain, providing timely, practical guidance on control design, risk appetite, and the management of emerging operational risks.
• Provide first line assurance input into risk assessments for proposed process changes, new initiatives, and strategic projects, helping business owners understand and address control gaps before they materialise.
• Proactively identify thematic risk trends and control weaknesses emerging across the domain and escalate these with supporting analysis and recommended management actions.
• Maintain awareness of the regulatory landscape, industry developments, and internal policy changes relevant to the domain, advising stakeholders on implications for their control environments.
• Provide structured assurance oversight on projects and change initiatives within the domain, ensuring that risk and control considerations are embedded throughout the project lifecycle — from initiation through to post-implementation review.
• Engage with project teams and sponsors at key milestones to assess whether project governance, risk management, and control frameworks are adequate and operating effectively.
• Escalate unresolved control gaps or unacceptable residual risks on projects to senior management with clear, evidence-based recommendations for remediation.
• Maintain a register of active projects and change programmes within the domain, tracking the status of control-related commitments and assurance findings through to closure.
• Lead, coach, and develop the team of Internal Control Officers, setting clear performance objectives, providing ongoing feedback, and supporting professional growth and technical capability development.
• Allocate work across the team in a manner that reflects individual strengths, development needs, and operational priorities, ensuring consistent quality and delivery across all assurance activities.
• Foster a collaborative, high-performance team culture grounded in integrity, attention to detail, and continuous improvement.
• Champion a strong risk and control culture across the domain through structured training, stakeholder engagement, and visible leadership — positioning Internal Controls as a value-adding partner rather than a compliance exercise.
• Prepare and present clear, concise assurance reports and management information to senior stakeholders, including trend analysis, key risk themes, and the overall health of the control environment.

• Analytical Thinking & Risk Judgement
• Planning, Organization & Delivery
• Problem Solving & Decision Making
• Strategic Perspective
• Communication & Reporting
• Stakeholder Engagement & Influence
• Leadership & People Development
• Technical Knowledge (Risk & Control Frameworks)
• Change & Project Assurance
• Integrity & Professional Independence
• Self-development

• A minimum qualification of a Bachelor’s Degree in a Business-related field or IT.
• A relevant post graduate qualification will be an added advantage.
• Relevant professional certifications IT risk and assurance and qualifications in risk management / audit will be an added advantage.
• Solid background in risk management, internal controls, IT, risk assurance and collaboration with multiple stakeholders to foster a culture of accountability and risk-awareness.
• Knowledge of risk management frameworks and processes.
• Knowledge of laws, regulations, policies, and ethics as they relate to banking.
• Knowledge of applicable business processes and operations of financial institutions.
• Knowledge of enterprise risk management and business continuity planning.