Head of Internal Audit

The Head of Internal Audit is responsible for leading an independent and objective internal audit function that provides assurance to the Board Audit Committee and Executive Management on the effectiveness of the BCB Group's governance, risk management, and internal control framework.

The role is accountable for developing and delivering a risk-based audit plan that evaluates the adequacy and effectiveness of financial, operational, regulatory, technology, and strategic controls across the Group. The Head of Internal Audit acts as a trusted advisor to the Board Audit Committee and Executive Management, providing insight on emerging risks, regulatory developments, operational resilience, cybersecurity, digital transformation, and business change initiatives.

The role ensures the internal audit function operates in accordance with the Internal Audit Charter, the International Professional Practices Framework (IPPF) and all applicable regulatory requirements, while promoting a strong culture of accountability, risk awareness and continuous improvement across the organisation.

• Assist the Board of Directors and Executive Management in accomplishing their objectives by bringing a systematic and disciplined approach to evaluating, improving, and maintaining the effectiveness of the BCB Group’s risk management, internal controls, and governance processes.
• Serve as a trusted advisor to the Board Audit Committee and Executive Management on emerging risks, governance developments, regulatory change, technology transformation, and evolving industry practices.
• Challenge the Board of Directors and Executive Management to improve, where applicable, the effectiveness of risk management, internal controls, and governance process of the BCB Group.
• Execute organisation-wide risk assessments to identify significant risks or exposure related to internal controls or compliance with the BCB Group’s policies and procedures, laws and regulations, and efficiency of operations. Provide feedback and recommendations on business risks and improving operational efficiencies and processes, where appropriate.
• Develop annually a risk-based internal audit plan for BAC review and approval. Oversee the implementation of the approved plan, ensure proper resourcing for implementation of the plan, and adjust the plan as needed in response to changes in the BCB Group’s strategy, business risks, operations, programs, systems, products and controls. Keep Executive Management and BAC apprised of any needed changes to the plan.
• Provide independent assurance over strategic transformation initiatives, digital banking programmes, technology modernization activities, fintech partnerships, and emerging digital financial services to ensure appropriate governance, risk management, regulatory compliance, and control effectiveness throughout delivery and ongoing operations.
• Ensure methodical documentation of work plans, testing results, conclusions, and recommendations. Follow up and track findings and validate closure of findings through the satisfactory design and/or implementation of corrective actions.
• Coordinate and assist with the preparation of BAC meeting materials. Participate in quarterly or more frequent BAC meetings.
• Evaluate specific operations at the request of BAC or Executive Management, as appropriate.
• Maintain current knowledge of regulatory and legislative developments impacting the BCB Group, as well as leading practices and international auditing standards, and ensure these considerations are appropriately reflected in the internal audit strategy, plan, and methodology.
• Promote the use of data analytics and continuous auditing techniques to enhance audit coverage, identify emerging risks, and improve the efficiency and effectiveness of the internal audit function.
• Lead the development and execution of a risk-based technology audit programme covering digital banking platforms, cybersecurity, cloud services, APIs, data governance, technology change management, IT general controls, and emerging technologies.
• Evaluate and provide independent assurance over emerging business activities, including but not limited to digital assets, fintech partnerships, payment solutions, digital wallets, merchant acquiring, and new product propositions to ensure risks are identified, assessed, and managed appropriately.
• Provide independent assurance regarding the effectiveness of the Bank's operational resilience framework,…