## Responsibilities
Actively participate in the design and delivery of the Group’s governance and controls strategy;
Support the embedding of management’s Group-wide Internal Control Environment (ICE) Framework, advising on Process Controls, Entity Level Controls, IT Application Controls and IT General Controls;
Lead internal readiness assessments for Service Organisation Control (SOC) 1 and 2 reports (both Type I and II), supporting the global business’ operations, reporting and compliance objectives;
Develop and deliver a first line management testing model, including the annual scoping approach and ongoing process / control design and operating effectiveness assessments;
Develop and manage an annual Group-wide system of control attestation program;
Support the implementation of AuditBoard as the Group’s integrated GRC tool, including OpsAudit and SOXHUB modules;
Build strong working relationships with the central functions and business units to ensure sufficient and effective controls are in place across key processes and applications;
Perform risk assessments and walkthroughs, supporting management in the preparation / updating of process flows, descriptions and risk control matrices in accordance with ICE criteria;
Identify potential gaps and support management in the design, monitoring and reporting of remediation plans to address any control issues;
Work closely with Internal Audit, Risk and Compliance to understand high risk areas, ensuring adequate assurance coverage across the three lines of defense;
Serve as the Point of Contact and assume ongoing management responsibilities for the Group’s Market and Credit Risk policies; and
Assist with audit readiness, policy management and other special projects.
## Requirements
Qualifications (must-haves):
Bachelor’s degree, CIA, or professional accounting designation (e.g. CPA, CGMA, ACA, ACCA);
Minimum of 10 years relevant technical experience (audit, internal controls, SOX);
Experience working in digital assets, financial services or tech sector;
Strong understanding of the COSO 2013 Internal Control - Integrated Framework;
Experience in the planning and delivery of SOC 1 and 2 reports (both Type I and Type II reports);
Experience working with Finance, Tech, Risk, Compliance and Internal Audit teams on continuous process and control improvements; and
Strong organizational, interpersonal and communication skills.