Internal Control Officers at Pishon and Brooks Advisory Services

JOB PURPOSE

• The Business Innovation & Delivery, PTSA Operations, Channels Operations and UP Exchange Control Officer is responsible for supporting the implementation and effectiveness of internal controls across Business Innovation & Delivery, PTSA Operations, Channels Operations, and UP Exchange Operations.                             
• The role provides independent monitoring, control testing, operational risk assessments, compliance reviews, and exception reporting to ensure operational activities are conducted in accordance with approved policies, regulatory requirements, and internal control standards. The incumbent identifies control weaknesses, supports remediation efforts, and contributes to the continuous improvement of operational processes and the organization’s control environment.

DUTIES AND RESPONSIBILITIES:

Operational Control Monitoring

• Conduct risk-based control reviews across Business Innovation & Delivery, PTSA Operations, Channels Operations, and UP Exchange Operations.
• Perform walkthroughs and control testing to evaluate compliance with approved policies, procedures, and operational standards.
• Review operational workflows to identify control weaknesses, process inefficiencies, and operational risks.
• Review transaction processing, settlement activities, reconciliations, and exception management processes to ensure control effectiveness.
• Monitor operational performance against established control requirements and escalate identified deficiencies.
• Document findings and recommend practical control improvements.

Project and Change Control

• Review new operational initiatives, process enhancements, and technology implementations from a control perspective.
• Participate in reviews of user acceptance testing (UAT), deployment activities, and change management processes.
• Verify that appropriate controls are implemented before operational changes are introduced.
• Monitor post-implementation activities to ensure identified control issues are addressed.

Operational Risk and Compliance

• Monitor compliance with applicable regulatory requirements, internal policies, operational standards, and service level agreements.
• Review operational incidents, service disruptions, reconciliation exceptions, and operational loss reports.
• Monitor key operational risk indicators and identify emerging risks within assigned functions.                                                                                                         
• Track audit findings, regulatory observations, and agreed management action plans.                                
• Escalate policy breaches, operational incidents, and control deficiencies in accordance with established procedures.

Reporting and Documentation

• Prepare control review reports, exception reports, and periodic management reports.
• Maintain accurate working papers and supporting documentation for all control review activities.
• Document testing results, observations, and recommendations.
• Support the preparation of reports required for management, internal audit, and regulatory reviews.

Stakeholder Support and Continuous Improvement

• Work closely with Business Innovation & Delivery, PTSA Operations, Channels Operations, and UP Exchange teams to promote compliance with internal control requirements.
• Follow up with process owners on outstanding control issues and agreed corrective actions.
• Support initiatives aimed at improving operational efficiency and strengthening internal controls.
• Participate in departmental projects and other assignments as directed by the Head, IT /Operations Control.

KEY PERFORMANCE INDICATORS

• Quality and timeliness of operational control reviews.
• Timeliness of issue identification, escalation, and reporting.
• Number and quality of control exceptions identified.
• Timely closure of audit, regulatory, and internal control findings.
• Reduction in operational control exceptions and reconciliation issues.
• Compliance with internal policies, regulatory requirements, and operational standards.
• Accuracy and completeness of review documentation.
• Effectiveness of remediation follow-up.
• Contribution to operational process improvements.
• Responsiveness to stakeholder requests and assigned deliverables.

REQUIREMENTS

Education:

• Bachelor’s Degree in Computer Science, Information Technology, Information Systems, Engineering, Business Administration, Finance, or a related discipline.

Professional Certifications

• CISA, CRISC, COBIT Foundation, ITIL, CIA, Lean Six Sigma, PMP, PRINCE2, or related professional certification will be an added advantage.

Experience:

• Minimum of 5 years’ relevant experience in Internal Control, IT Audit, Operational Risk, Technology Risk, Operations Assurance, or IT Governance.
• Experience within fintech, banking, payment services, or other technology-driven organisations is preferred.
• Experience conducting operational control reviews, compliance testing, project assurance activities, or operational risk assessments.

Skill/Competencies:

• Good knowledge of internal control frameworks, operational risk management, and IT governance principles.
• Understanding of digital payment operations, channels management, transaction processing, settlement operations, and project delivery processes.
• Strong analytical, investigative, and problem-solving skills.
• Good report writing and documentation skills.
• Effective communication and interpersonal skills.Ability to identify process weaknesses and recommend practical control improvements.
• Proficiency in Microsoft Excel, Power BI, and other business reporting and data analysis tools.
• Strong attention to detail, integrity, professionalism, and sound judgement.

go to method of application »

JOB PURPOSE

• The Compliance, Information Security, Enterprise Risk Management, Legal / Company Secretary and Executive Office Control Officer is responsible for providing independent control oversight and assurance across Compliance, Information Security, Enterprise Risk Management, Legal/Company Secretariat, Executive Office, and assigned subsidiary functions.
• The role supports the effectiveness of the organization’s governance and control framework through risk-based reviews, control testing, compliance monitoring, governance assessments, incident investigations, and advisory support. The incumbent works closely with business and control functions to ensure adherence to regulatory requirements, internal policies, governance standards, and industry best practices while supporting the achievement of organizational objectives.

DUTIES & RESPONSIBILITIES

Governance and Control Assurance

• Lead risk-based control reviews across Compliance, Information Security, Enterprise Risk Management, Legal/Company Secretariat, Executive Office, and assigned subsidiary functions.
• Assess the adequacy and effectiveness of governance frameworks, policies, procedures, and internal controls.
• Conduct periodic control testing and independent reviews to evaluate compliance with approved standards and regulatory requirements.
• Review governance structures, committee activities, policy administration processes, and decision-making frameworks to ensure compliance with corporate governance requirements.
• Evaluate the effectiveness of whistleblowing, ethics, and governance-related processes and controls.
• Monitor implementation of governance policies, standards, and control requirements across assigned functions and subsidiaries.

Compliance and Regulatory Oversight

• Monitor compliance with applicable regulatory requirements, including CBN regulations, NDPR requirements, AML/CFT obligations, PCI DSS standards, ISO standards, and other relevant regulatory frameworks.
• Review regulatory submissions, compliance reports, and control documentation for  completeness and accuracy.
• Track regulatory observations, audit findings, and compliance exceptions to ensure timely remediation.
• Support reviews arising from regulatory examinations, audits, and governance assessments.
• Escalate regulatory breaches, policy violations, and control deficiencies promptly.

Information Security and Risk Management Reviews

• Perform control reviews of information security governance processes, cybersecurity controls, access management, data protection practices, and related risk management activities.
• Assess compliance with information security policies, standards, and regulatory requirements.
• Review enterprise risk management processes, risk registers, risk assessments, and mitigation plans for adequacy and effectiveness.
• Monitor key risk indicators and control effectiveness across assigned functions.
• Participate in investigations relating to security incidents, operational losses, fraud events, and governance breaches.

Subsidiary Control Assurance

• Conduct periodic control reviews and assurance activities across assigned subsidiaries.
• Review control reports, exception reports, unusual incident reports, and open-item reports received from subsidiaries.
• Monitor implementation of group control frameworks, policies, and standards across subsidiary operations.
• Validate the adequacy of control remediation activities and follow up on outstanding issues.
• Support control environment assessments and control standardization initiatives across subsidiaries.

Advisory and Business Support

• Provide control advisory support to Compliance, Information Security, Enterprise Risk Management, Legal/Company Secretariat, Executive Office, and subsidiary stakeholders.
• Review new policies, governance initiatives, operational changes, and strategic projects from a control and risk perspective.
• Support process improvement initiatives aimed at strengthening governance, compliance, and operational effectiveness.
• Promote awareness of governance, risk, compliance, and control requirements across assigned functions.

Reporting and Stakeholder Management

• Prepare control review reports, governance assessment reports, management reports, and exception reports.
• Present findings, recommendations, and control observations to management and relevant stakeholders.
• Track remediation activities and engage process owners to ensure timely resolution of identified issues.
• Maintain effective working relationships with Compliance, Information Security, Enterprise Risk Management, Legal, Executive Office, Internal Audit, Risk Management, and subsidiary stakeholders.
• Support the preparation of management, committee, and Board reports relating togovernance and control matters.

Continuous Improvement

• Support the Head, Business & Shared Services Control in executing departmental initiatives, projects, and special assignments.
• Identify opportunities for control enhancement, process optimization, and automation.
• Contribute to the continuous improvement of governance and control practices across the organization and its subsidiaries.
• Provide guidance and support to junior team members where required.

KEY PERFORMANCE INDICATORS

• Quality and timeliness of control reviews and reports.
• Timely closure of audit, regulatory, and control exceptions.
• Number and significance of governance and control issues identified.
• Reduction in control incidents, policy breaches, and regulatory infractions.
• Effectiveness of remediation monitoring and issue resolution.
• Compliance with regulatory and governance requirements.
• Quality of subsidiary control oversight and reporting.
• Timeliness of incident escalation and reporting.
• Stakeholder satisfaction and engagement.
• Contribution to governance and control environment improvements.

REQUIREMENTS

Education: Bachelor’s Degree or HND in Accounting, Finance, Economics, Business Administration, Law, Information Systems, Risk Management, or a related discipline.

Professional Certifications

• ACA, ACCA, CISA, CIA, CRISC, ISO 27001 Lead Implementer/Auditor, CFE, or equivalent professional certification.
• Additional governance, risk management, compliance, information security, or audit certifications will be an added advantage.

Experience:

• Minimum of 6 years’ relevant experience in Internal Control, Internal Audit, Compliance, Enterprise Risk Management, Information Security Governance, Operational Risk, or Corporate Governance.
• Experience within fintech, banking, financial services, payments, or other regulated industries is strongly preferred. Demonstrated experience conducting independent control reviews, governance assessments, investigations, and risk-based reviews.

Skill/Competencies:

• Strong knowledge of corporate governance principles, internal control frameworks, and risk management practices.
• Good understanding of compliance management, information security governance, enterprise risk management, and regulatory requirements.
• Strong analytical, investigative, and problem-solving skills.
• Excellent report writing and presentation skills.
• Effective stakeholder management and communication skills.
• Ability to evaluate processes and recommend practical control improvements.
• Strong attention to detail and professional judgement.
• Working knowledge of applicable financial services regulations and governance standards.
• Proficiency in Microsoft Office applications and data analysis tools.
• High level of integrity, professionalism, confidentiality, and sound judgement.

go to method of application »

JOB PURPOSE

• The Expenditure & Reconciliation and Customer Care Control Officer is responsible for supporting the implementation and effectiveness of internal controls across Expenditure Management, Reconciliation, and Customer Care functions. The role provides independent monitoring, control testing, exception tracking, and compliance reviews to ensure operational activities are conducted in accordance with approved policies, procedures, regulatory requirements, and internal governance standards.
• The incumbent is responsible for identifying control weaknesses, monitoring operational risks, escalating exceptions, and supporting the resolution of identified control issues to safeguard organizational assets, enhance operational efficiency, and strengthen the overall control environment.

DUTIES & RESPONSIBILITIES

Control Monitoring and Testing

• Perform periodic control reviews and testing of expenditure, reconciliation, and customer care processes.
• Review expenditure transactions to ensure compliance with approved policies, delegated authorities, and budgetary controls.
• Monitor reconciliation activities to ensure timely identification and resolution of outstanding and unreconciled items.
• Review reconciliation reports and exception logs for completeness, accuracy, and timely resolution.
• Monitor customer complaints, service requests, dispute resolution activities, and escalation processes to ensure adherence to approved procedures and service standards.
• Verify compliance with established controls within customer care operations and complaint management processes.
• Identify and escalate control breaches, policy violations, operational lapses, and unusual transactions.

Risk Management and Compliance

• Support risk assessment activities within assigned business functions.
• Monitor compliance with applicable regulatory requirements, internal policies, and operational guidelines.
• Track outstanding audit findings, control observations, and remediation actions to ensure timely closure.
• Assist in the investigation of operational incidents, reconciliation exceptions, customer complaints, and suspected fraud cases.
• Maintain records of identified risks, control deficiencies, and corrective actions.

Reporting and Documentation

• Prepare periodic control reports, exception reports, and management information reports.
• Document control review activities, testing results, findings, and recommendations.
• Ensure prompt escalation and reporting of unusual incidents, operational losses, and significant control issues.
• Maintain accurate and up-to-date control review working papers and supporting documentation.

Advisory and Process Improvement

• Provide support to business units on adherence to internal control requirements and approved procedures.
• Recommend practical improvements to strengthen operational controls and enhance process efficiency.
• Support reviews of process changes and operational initiatives to identify potential control implications.
• Promote awareness of internal control requirements within assigned departments.

Stakeholder Engagement

• Maintain effective working relationships with Expenditure Management, Reconciliation, Customer Care, Compliance, Risk Management, and other relevant stakeholders.
• Follow up with process owners on outstanding issues and agreed corrective actions.
• Support departmental initiatives and special assignments as directed by the Head, Business & Support Control.

KEY PERFORMANCE INDICATORS

• Timeliness and quality of control reviews and reports.
• Number and quality of control exceptions identified.
• Timely escalation of operational incidents and control breaches.
• Reduction in outstanding reconciliation items.
• Timeliness of audit and control issue resolution.
• Compliance with internal policies and regulatory requirements.
• Accuracy and completeness of control documentation.
• Effectiveness of remediation tracking and follow-up.
• Reduction in expenditure-related control exceptions.
• Stakeholder responsiveness and service delivery support.

REQUIREMENTS

Education: Bachelor’s Degree in Accounting, Finance, Business Administration, Economics, or a related discipline.

Professional Certifications: ACA, ACCA, CIA, CISA, or related professional qualifications will be an added advantage.

Experience:

• Minimum of 4 years’ relevant experience in Internal Control, Internal Audit, Risk Management, Compliance, or Operational Control.
• Experience within fintech, banking, financial services, payments, or other regulated industries is preferred.
• Experience in reconciliation reviews, expenditure control, operational monitoring, or customer service oversight will be an added advantage.

Skill/Competencies:

• Knowledge of internal control principles and risk management practices.
• Understanding of reconciliation processes, expenditure controls, and customer service operations.
• Strong analytical and problem-solving skills.
• Good report writing and documentation skills.
• Attention to detail and accuracy.
• Effective communication and interpersonal skills.
• Ability to identify process weaknesses and recommend practical improvements.
• Proficiency in Microsoft Excel and other business reporting tools.
• High level of integrity, professionalism, and confidentiality

go to method of application »

JOB PURPOSE

• The Merchant & Agency Services and E-Commerce Control Officer is responsible for providing independent control oversight, assurance, and monitoring of activities within the Merchant & Agency Services and E-Commerce business functions. The role supports the effectiveness of the organization’s internal control framework by identifying control weaknesses, monitoring compliance with approved policies and procedures, mitigating operational risks, and ensuring adherence to regulatory and internal governance requirements.
• The officer will perform risk-based control reviews, control testing, exception monitoring, and reporting activities aimed at safeguarding company assets, preventing losses, strengthening operational efficiency, and promoting a strong control culture across the assigned business functions.

DUTIES & RESPONSIBILITIES

Control Monitoring and Assurance

• Perform periodic and risk-based control reviews of Merchant & Agency Services and E-Commerce operations.
• Monitor business processes to ensure compliance with approved policies, procedures, service standards, and regulatory requirements.
• Conduct control testing and validate the effectiveness of key operational controls.
• Identify control gaps, process weaknesses, and operational risks, and recommend appropriate corrective actions.
• Review merchant onboarding, agency banking activities, and e-commerce transactions to ensure compliance with established controls.
• Monitor transaction processing activities for unusual trends, irregularities, exceptions, and potential fraud indicators.
• Ensure prompt escalation of identified control breaches, operational lapses, and policy violations.

Risk Management and Compliance

• Support risk assessment exercises for assigned business functions.
• Ensure compliance with applicable regulatory requirements, including CBN guidelines, AML/CFT regulations, NDPR requirements, and other relevant industry standards.
• Monitor the implementation of corrective actions arising from audits, regulatory examinations, and internal control reviews.
• Participate in investigations relating to operational incidents, control failures, fraud cases, and customer disputes.
• Track and report outstanding control issues and ensure timely closure by process owners.

Reporting and Documentation

• Prepare periodic control reports, exception reports, and management updates for review by the Head, Business & Support Control.
• Maintain accurate documentation of control reviews, testing results, findings, and remediation activities.
• Ensure prompt reporting of unusual incidents, control breaches, and emerging risks.
• Support the preparation of audit and regulatory examination responses where required.

Advisory and Process Improvement

• Provide control advisory support to Merchant & Agency Services and E-Commerce teams.
• Review new products, initiatives, process changes, and system enhancements to identify potential control implications.
• Recommend process improvements that strengthen controls while supporting business efficiency.
• Promote awareness of internal control policies and best practices within assigned business units.
• Maintain effective working relationships with stakeholders to facilitate timely resolution of control issues.

KEY PERFORMANCE INDICATORS

• Timeliness and quality of control reviews and reports.
• Number and quality of control issues identified.
• Timely closure of audit and control exceptions.
• Reduction in operational losses and control incidents.
• Reduction in unresolved reconciliation and exception items.
• Compliance with regulatory and internal policy requirements.
• Timeliness of incident escalation and reporting.
• Quality of control testing documentation.
• Effectiveness of remediation monitoring and follow-up activities.
• Stakeholder satisfaction with control advisory support.

REQUIREMENTS

Education: Bachelor’s degree in Finance, Accounting, Business Administration, Economics or a related field.

Professional Certifications: ACA, ACCA, CIA, CISA, CRISC, or equivalent professional certification will be an advantage.

Experience:

• Minimum of 4 years’ relevant experience in Internal Control, Internal Audit, Risk Management, Compliance, or Operational Control.
• Experience within fintech, payments, banking, financial services, agency banking, merchant acquiring, or e-commerce environments is preferred.
• Experience in operational risk assessment, control testing, reconciliation review, and exception management.

Skill/Competencies:

• Knowledge of internal control principles, risk management frameworks, and governance practices.
• Understanding of payment systems, merchant acquiring, agency banking, and e commerce operations.
• Strong analytical and problem-solving skills.
• Attention to detail and high level of accuracy.
• Effective report writing and documentation skills.
• Good stakeholder management and communication skills.
• Ability to identify process weaknesses and recommend practical solutions.
• Sound knowledge of regulatory and compliance requirements applicable to the financial services industry.
• Proficiency in Microsoft Excel, Power BI, and other data analysis tools.
• High level of integrity, professionalism, and confidentiality.

go to method of application »

JOB PURPOSE

• Network & User Administration, Data Center, Disruptions and IT Security Control is responsible for providing independent control oversight and assurance across network infrastructure, user administration, data centre operations, IT disruptions, and information security processes.
• The role supports the effectiveness of the organization’s IT and Operations Control framework through risk-based control reviews, IT control testing, operational risk assessments, information security reviews, incident investigations, and compliance monitoring. The incumbent works closely with Infrastructure, Information Security, Technology Operations, and Risk Management teams to ensure that technology services are secure, resilient, available, and compliant with regulatory and organizational requirements.

DUTIES & RESPONSIBILITIES

IT Infrastructure and Security Control Assurance

• Lead risk-based control reviews across Network Administration, User Administration, Data Centre Operations, IT Security, and IT Service Operations.
• Evaluate the adequacy and effectiveness of IT General Controls (ITGCs), infrastructure controls, and operational processes.
• Conduct periodic walkthroughs and control testing to validate compliance with approved policies, procedures, and technology standards.
• Review network security controls, firewall administration, endpoint protection, and infrastructure monitoring processes.
• Assess user provisioning, de-provisioning, access reviews, privileged account management, and segregation of duties controls.
• Review data centre operations, server administration, backup management, environmental controls, and physical security measures.

Information Security and Operational Risk Reviews

• Review information security governance processes, cybersecurity controls, vulnerability management, and patch management activities.
• Assess compliance with information security policies, data protection requirements, and regulatory obligations.
• Review disaster recovery, business continuity, backup restoration, and resilience testing activities.
• Monitor technology risk indicators and recommend improvements to strengthen operational resilience.
• Participate in investigations relating to cybersecurity incidents, infrastructure failures, operational disruptions, fraud events, and control breaches.

Incident and Disruption Management

• Review IT incident management, problem management, and root cause analysis processes.
• Assess controls over system availability, service disruptions, outage management, and service recovery activities.
• Monitor recurring operational incidents and recommend preventive control improvements.
• Track implementation of corrective actions arising from operational incidents and post-incident reviews.
• Escalate significant control weaknesses, security concerns, and operational risks to management.

Compliance and Governance

• Monitor compliance with applicable regulatory requirements, including CBN guidelines, NDPR, PCI DSS, ISO 27001, COBIT, and other relevant standards.
• Review audit findings, regulatory observations, vulnerability assessment reports, and penetration testing reports.
• Track implementation of agreed remediation actions and validate their effectiveness.
• Support internal, external, and regulatory audit activities relating to technology infrastructure and information security.
• Promote adherence to technology governance and internal control requirements.

Reporting and Stakeholder Management

• Prepare comprehensive control review reports, exception reports, and management reports.
• Present findings, recommendations, and control observations to technology and business stakeholders.
• Maintain effective working relationships with Infrastructure, Information Security, Technology Operations, Risk Management, Compliance, and Internal Audit teams.
• Track remediation activities to ensure timely closure of identified issues.
• Support the preparation of management reports relating to IT operational risk and control effectiveness.

Continuous Improvement

• Support the Head, IT / Operations Control in executing departmental initiatives and strategic projects.
• Identify opportunities for automation, control optimization, and operational efficiency improvements.
• Contribute to the continuous enhancement of the IT and Operations Control framework.
• Provide technical guidance and support to junior control officers where required     

KEY PERFORMANCE INDICATORS

• Quality and timeliness of IT control reviews and reports.
• Timely closure of audit, regulatory, and control findings.
• Reduction in recurring infrastructure and security control issues.
• Timeliness of incident identification, escalation, and reporting.
• Effectiveness of remediation monitoring and issue resolution.
• Compliance with regulatory requirements and internal technology policies.
• Improvement in IT General Control (ITGC) effectiveness.
• Reduction in repeat audit findings and security vulnerabilities.
• Stakeholder satisfaction with control advisory services.
• Contribution to operational resilience and control enhancement initiatives. 

REQUIREMENTS

Education: Bachelor’s Degree in Computer Science, Information Technology, Information Systems, Cybersecurity, Engineering, or a related discipline.

Professional Certifications

• CISA, CISM, CRISC, ISO 27001 Lead Implementer/Auditor, COBIT Foundation, ITIL, PCI DSS, or equivalent professional certification.
• Additional certifications in Cybersecurity, Information Security, IT Governance, or Internal Audit will be an added advantage.

Experience:

• Minimum of 5–6 years’ relevant experience in IT Audit, IT Internal Control, Information Security, Technology Risk, Infrastructure Operations, or IT Governance.
• Experience within fintech, banking, payment services, or other technology-driven organizations is preferred.
• Demonstrated experience conducting IT control reviews, information security assessments, infrastructure audits, and operational risk reviews.

Skill/Competencies:

• Strong knowledge of IT governance frameworks, including COBIT, COSO, and ISO 27001.
• Good understanding of network infrastructure, user access management, data centre operations, and information security principles.
• Knowledge of cybersecurity controls, disaster recovery, business continuity, and operational resilience.
• Strong analytical, investigative, and problem-solving skills.
• Excellent report writing and presentation skills.
• Effective stakeholder management and communication skills.
• Proficiency in Microsoft Excel, Power BI, SQL, ACL, IDEA, or similar audit and data analysis tools.
• Ability to identify control weaknesses and recommend practical improvements.
• High level of integrity, professionalism, confidentiality, and sound judgement.