Internal Control & Risk Specilaist

• Support the development and maintenance of the organisation's internal control framework, ensuring controls are practical, proportionate, and appropriate to the size and nature of the business.
• Document and map key business processes across departments, identifying control gaps and improvement opportunities
• Maintain process maps, Standard Operating Procedures (SOPs), and Risk & Control Matrices (RCMs) in an organised and up-to-date state
• Assess whether existing controls are well-designed and working effectively in practice
• Follow up on control weaknesses and recommend sensible, workable improvements to management
• Prepare simple, clear dashboards that give management a regular view of control health and compliance status
• Assist with internal and external audit processes by coordinating relevant documentation and responses

Risk Management:

• Support the implementation of a structured approach to enterprise risk management that is fit for a small, growing organisation, practical rather than bureaucratic.
• Assist in facilitating risk identification and assessment sessions across departments
• Maintain the organisation's risk register, ensuring it is reviewed and updated on a regular basis
• Track Key Risk Indicators (KRIs) and flag trends or emerging concerns to management
• Follow up on agreed risk mitigation actions and report on progress
• Prepare clear, concise risk reports for management that highlight key exposures and recommend responses
• Support efforts to build awareness of risk management principles among staff

Operational & Fraud Risk:

• Monitor the organisation's day-to-day risk exposures — including operational disruptions, fraud indicators, and control breaches — and support management in responding promptly and effectively.
• Track operational and fraud-related risk indicators and report on incidents or near-misses
• Monitor customer satisfaction data, operational performance, and fraud-related trends
• Investigate root causes of recurring operational issues and recommend corrective actions
• Support business continuity planning and help ensure key processes remain resilient
• Prepare regular management reports covering operational risk, fraud prevention, and performance indicators

Requirements:

• 4 to 5 years' experience in internal control, risk management, or audit
• A relevant bachelor's degree is required in accounting, finance, business administration, economics, or a related field
• Hands-on experience with process mapping and risk assessments
• Experience preparing management dashboards, KRIs, and reports
• Comfortable working directly with senior management in a small team
• Experience in the travel, hospitality, or services sector
• Exposure to fraud risk monitoring or investigation
• Experience in a regulated environment or compliance function
• Experience with any ERM software or GRC tool