Specialist: Risk & Control Advisory

Risk and control advisory today goes far beyond identifying what could go wrong.

It’s about understanding how the business operates, translating complexity into clear risk and control frameworks, strengthening assurance, and helping organisations navigate transformation and emerging risks with confidence.

We’re looking for a Specialist: Risk and Control Advisory who understands that.

Reporting to the Senior Audit Manager within Group Internal Audit, this role provides specialised risk and control advisory support across Hollard and its subsidiaries. You’ll play a key role in strengthening the quality of assurance and advisory by translating business processes, transformation initiatives, and emerging risks into practical control frameworks that can be applied across entities at different levels of maturity.

What You’ll Be Trusted To Own

This is more than a traditional audit role. It’s about bringing clarity to complex business environments, strengthening how risks and controls are understood, and enabling consistent, high-quality assurance across the organisation.

You’ll

• Analyse business processes, systems, and workflows across the insurance value chain to identify key risks and control requirements.
• Translate complex business activities into clear, structured, and practical risk and control frameworks aligned to the business context.
• Partner with audit teams throughout planning, execution, and reporting, providing specialist input into audit scope, test design, risk assessment, and control evaluation.
• Review and challenge risk and control assessments to improve the quality, consistency, and effectiveness of audit outputs.
• Provide practical risk and control guidance to subsidiaries, taking into account different operating environments and levels of control maturity.
• Help strengthen and align control frameworks across entities while identifying common risk themes, control gaps, and opportunities for improvement.
• Contribute specialist risk and control expertise to advisory engagements supporting subsidiaries undergoing transformation or business change.
• Work alongside analytics and AI-focused resources to ensure risk and control frameworks support data-driven and technology-enabled audit approaches.
• Ensure risks and controls are clearly articulated to enable effective testing through data and analytics, while helping interpret analytical findings within the context of underlying business risks.
• Embed operational risk, conduct risk, customer fairness, regulatory requirements, and governance standards into audit and advisory activities.
• Exposure to transformation programmes or significant change initiatives will be advantageous.
• Exposure to data analytics or technology-enabled audit environments, including working with business and technical teams, will be advantageous.
• Identify risks arising from process failures, control breakdowns, and emerging business practices, translating these into practical insights for stakeholders.
• Drive continuous improvement in audit quality by contributing to risk and control templates, standards, methodologies, and guidance.