JOB DESCRIPTION - INTERNAL AUDITOR

The Internal Auditor is responsible for providing independent and objective assurance on the adequacy and effectiveness of Savanna PayPulse Limited's governance, risk management, internal controls and operational processes.

The role will independently assess whether the Company's operations, systems, financial activities and regulatory obligations are being managed effectively and in accordance with applicable laws, regulations, Bank of Uganda requirements, internal policies, approved procedures and industry standards applicable to Payment Service Providers.

The Internal Auditor will identify control weaknesses, assess risks, recommend practical corrective actions and independently monitor the implementation of agreed audit recommendations.

KEY RESPONSIBILITIES

A. Internal Audit Planning and Risk Assessment

• Develop and maintain a risk-based internal audit plan covering all material business, operational, financial, technology and regulatory risks.
• Conduct periodic risk assessments to determine audit priorities.
• Perform audits in accordance with the approved annual internal audit plan. Review emerging risks and recommend additional audit reviews where necessary.
• Ensure audit coverage is appropriate for the Company's risk profile and regulatory obligations.

B. Governance and Internal Controls

• Assess the adequacy and effectiveness of the Company's internal control framework.
• Review segregation of duties, authorisation controls, access controls and approval processes.
• Assess whether policies and procedures are properly implemented and operating effectively.
• Review governance arrangements and adherence to approved delegations and Board decisions.
• Identify control gaps and recommend appropriate remediation measures.

• Develop and maintain a risk-based internal audit plan covering all material business, operational, financial, technology and regulatory risks.
• Conduct periodic risk assessments to determine audit priorities.
• Perform audits in accordance with the approved annual internal audit plan. Review emerging risks and recommend additional audit reviews where necessary.
• Ensure audit coverage is appropriate for the Company's risk profile and regulatory obligations.
• Assess the adequacy and effectiveness of the Company's internal control framework.
• Review segregation of duties, authorisation controls, access controls and approval processes.
• Assess whether policies and procedures are properly implemented and operating effectively.
• Review governance arrangements and adherence to approved delegations and Board decisions.
• Identify control gaps and recommend appropriate remediation measures.