Description : Senior Internal Financial Controls Analyst. Company : null. Location :
Who are we?
The Sanlam Life and Savings cluster is responsible for Sanlam’s retail business in South Africa. Sanlam Life and Savings provides clients across different market segments (entry-level, middle-income, affluent, professional market and business owners) with a comprehensive range of appropriate and competitive financial solutions. These include traditional life insurance risk and savings products, investment, retirement, health and fiduciary services. Designed to facilitate long-term wealth creation, protection and niche financing, these solutions are engineered around client needs.
We believe in creating and cultivating a positive, energised working environment that gives you every opportunity to achieve success. Sanlam is committed to transformation and embracing diversity. This commitment is what drives us to achieve a diverse workplace with employment equity as a key goal to create an inclusive workforce, representative of the demographics of our society as well as people with disabilities.
The Finance Services function is responsible for delivering the following services to SLS, as well as other Clusters within Sanlam that make use of SAP S/4 HANA and related finance systems:
- The execution of shared financial transactions through the Finance Shared Services Centre.
- Drive operational excellence and efficiency through finance process and technology optimisation.
- Delivering an efficient financial control and compliance environment for SAP S/4HANA and related finance systems.
- Delivering on the consolidated financial reporting requirements for SLS.
The GRC CoE acts as a second line of defence in support of Business Units’ own financial control and compliance environments. The incumbent will partner with the Head of GRC and Business Unit Heads to promote adherence to agree upon financial control compliance processes. This role will furthermore be to support for the identification and reporting of non-compliance and recommendations on how this can be addressed.
What will make you successful in this role? The key performance areas of this role include the following:
GRC Strategy Development for Sanlam
- Support the Head of GRC CoE in the development of the GRC strategy for SLS to ensure greater compliance to required standards.
- Support various strategic initiatives ensuring greater compliance and awareness in support of realising the GRC strategy.
- Act as second line of defence in the design, implementation and management of control processes and documentation by:
- Supporting management in the identification, design and implementation of financial risk and controls through normal business as usual (BAU) operations and transformation initiatives (change in people/process/technology).
- Documenting identified financial risks and controls in a risk and control matrix.
- Defining and maintaining standards used to document financial risks and controls.
- Assist control owners and control performers in business and IT with walkthroughs of controls
- Maintaining the SAP Access Control ruleset to reflect the key access controls identified by business.
- Performing tests of effectiveness for key controls
- Creation of test plans for key controls
- Preparation of IFC monthly report which entails capturing all control deficiencies and remediation plans. Distribution of report to governance stakeholders, being CFO’s and heads of finance and IT executives.
- Continue to identify, design and implement optimisation opportunities in the financial control and compliance environment through innovation and automation.
- Support the management and delivery of financial controls through SAP Access Control 12 and Process Control 12 applications:
- Schedule SOD Review workflows to risk owners
- Maintain User Access review process in SAP Access Control
- Maintenance of Access Control custom ruleset at conceptual and permission/action level
- Run and interpret Access Risk Analysis reports and provide assistance to identify remedial actions
- Document and maintain the risks, controls and control owners in the repository (Process Control)
- Defining and documenting manual control procedure steps
- Regular review of access (UAR) and mitigations against the access risk ruleset (periodic) with root cause analysis
- Following up on escalation workflows for configuration control changes
- Creation/testing of new automated business rules and assignment to controls
- Monitor dashboards by GRC CoE on PC and investigate control exceptions
- Actively monitor control deficiencies and remediation plans providing assistance to control owners
- Provide Internal Team Training
- Provide training for control performer and control owners in SAP Process Control
- Support the Head of GRC CoE to operate as liaison between Business Unit management (first line of defence) and key stakeholders that include Internal Audit (3rd line of defence) and External Audit (4th line of defence).
- Bachelor’s degree in risk and compliance management, finance, audit or relevant field from a recognised institution.
- Professionally accredited from a recognised industry body as a Certified Information Systems Auditor (CISA) or a Certified Internal Auditor (CIA) or Chartered Accountant (CA) is an added advantage.
- SAP certification is an added advantage.
- 5 years of functional experience in Finance or Risk Management.
- 5 years comprehensive experience of internal audit, risk assessments, related methodology and terminology.
- 5 years in-depth knowledge of Risk and Compliance processes and controls.
- Functional experience in SAP Access Control, and SAP Process Control will be an added advantage
- Audit or internal financial controls experience in SAP environment (S/4HANA) is an added advantage
- Functional and basic technical understanding of SAP Fiori is an added advantage.
- Functional and basic technical knowledge and understanding of S/4HANA Security is an added advantage.
- Must be tech savvy
- Must be able to coach junior team members
- Must be able to perform well in a team.
- Must have the ability to communicate effectively.
- Should ensure accountability from all teams and stakeholders.
