Risk Governance and Culture

• Produce clear risk reports, dashboards, and papers for senior management, the Executive Committee, and the Board or Audit & Risk Committee.
• Analyse risk trends and emerging themes to provide insight that supports strategic decision-making.
• Support risk committees and governance forums, documenting discussions and tracking actions through to closure.
• Partner with teams across the business to strengthen risk awareness, ownership, and capability.
• Translate complex risk analysis into clear, practical recommendations for stakeholders at all levels.

Internal Audit and Assurance

• Plan and deliver risk-based internal audit engagements across financial, operational, compliance, and IT domains, from scoping through follow-up.
• Lead audit fieldwork, including walkthroughs, documentation reviews, and testing of control design and operating effectiveness.
• Contribute to the annual risk-based internal audit plan and ensure coverage of key business risks.
• Identify root causes of control weaknesses and develop practical, value-adding recommendations.
• Prepare evidence-based audit reports, track management actions, and coordinate with external auditors.

Internal Controls and SOX Compliance

• Support the design, implementation, and enhancement of the internal controls framework across financial reporting and operational processes.
• Perform control walkthroughs and effectiveness testing, identifying deficiencies and tracking remediation to closure.
• Support the SOX compliance programme, including control narratives, risk and control matrices, process documentation, and testing cycles.
• Advise first-line teams on embedding practical, well-documented controls into processes, systems, and change initiatives.
• Coordinate with external auditors on controls- and SOX-related matters.

Incidents, Emerging Risks, and Special Projects

• Support incident management and root cause analysis, working with business areas on practical and sustainable remediation.
• Coordinate across the second and third lines of defence to align risk assessment, response, assurance, and feedback.
• Maintain the emerging risks agenda, including AI, technology, market, regulatory, and best-practice developments.
• Provide risk input into major business, technology, and transformation projects, including new products, markets, systems, and operating models.
• Support ad hoc reviews and deliverables for the Audit, Risk & Controls function.

About You

• You have 6–10 years of experience in enterprise, operational, or strategic risk management, with increasing levels of responsibility.
• You hold a bachelor’s degree in Business, Finance, Risk Management, or a related field.
• You have worked within a risk function, providing effective oversight while collaborating constructively with the business.
• You have demonstrable experience planning and delivering risk-based internal audits and independently testing control design and operating effectiveness.
• You have generalist experience across internal controls and SOX compliance, including documentation, testing, and remediation.
• You have strong working knowledge of ISO 31000, COSO ERM, the COSO Internal Control Framework, the three lines of defence model, and IIA standards.
• You have experience developing risk appetite statements, Key Risk Indicators, enterprise risk registers, and executive- or Board-level reporting.
• You can use data analytics and risk management or GRC tools to support reporting, assurance, and insight.
• You communicate clearly, exercise sound judgement, and build trusted relationships while constructively influencing stakeholders at all levels.
• A professional qualification such as IRM, CIA/IIA, CIMA, CFA, PRM, or equivalent is preferred, or you are actively working towards one.

Experience in a high-growth technology environment, AI infrastructure, cloud platforms, international risk, or emerging technology risk would be advantageous. Familiarity with platforms such as Workiva or Vanta and experience supervising junior team members or outsourced resources would also be valuable.

Equal Opportunities Statement

We strongly encourage applications from people of colour, the LGBTQ+ community, people with disabilities, neurodivergent people, parents, carers, and people from lower socio-economic backgrounds.

If there’s anything we can do to accommodate your specific situation, please let us know.

The responsibilities outlined in this job description are not exhaustive and are intended to provide a general overview of the position. The employee may be required to perform additional duties, tasks, and responsibilities as assigned by management, consistent with the skills and qualifications required for the role.

For information on how Nscale handles candidate personal data, please see our Employee & Candidate Privacy Notice: Here.