Responsibilities:

Internal Control:

Support the development and maintenance of the organisation's internal control framework, ensuring controls are practical, proportionate, and appropriate to the size and nature of the business.
Document and map key business processes across departments, identifying control gaps and improvement opportunities
Maintain process maps, Standard Operating Procedures (SOPs), and Risk & Control Matrices (RCMs) in an organised and up-to-date state
Assess whether existing controls are well-designed and working effectively in practice
Follow up on control weaknesses and recommend sensible, workable improvements to management
Prepare simple, clear dashboards that give management a regular view of control health and compliance status
Assist with internal and external audit processes by coordinating relevant documentation and responses

Risk Management:

Support the implementation of a structured approach to enterprise risk management that is fit for a small, growing organisation, practical rather than bureaucratic.
Assist in facilitating risk identification and assessment sessions across departments
Maintain the organisation's risk register, ensuring it is reviewed and updated on a regular basis
Track Key Risk Indicators (KRIs) and flag trends or emerging concerns to management
Follow up on agreed risk mitigation actions and report on progress
Prepare clear, concise risk reports for management that highlight key exposures and recommend responses
Support efforts to build awareness of risk management principles among staff

Operational & Fraud Risk:

Monitor the organisation's day-to-day risk exposures — including operational disruptions, fraud indicators, and control breaches — and support management in responding promptly and effectively.
Track operational and fraud-related risk indicators and report on incidents or near-misses
Monitor customer satisfaction data, operational performance, and fraud-related trends
Investigate root causes of recurring operational issues and recommend corrective actions
Support business continuity planning and help ensure key processes remain resilient
Prepare regular management reports covering operational risk, fraud prevention, and performance indicators

Requirements:

4 to 5 years' experience in internal control, risk management, or audit
A relevant bachelor's degree is required in accounting, finance, business administration, economics, or a related field
Hands-on experience with process mapping and risk assessments
Experience preparing management dashboards, KRIs, and reports
Comfortable working directly with senior management in a small team
Experience in the travel, hospitality, or services sector
Exposure to fraud risk monitoring or investigation
Experience in a regulated environment or compliance function
Experience with any ERM software or GRC tool

Internal Control & Risk Specilaist