Business Risk Governance & Internal Control Management Manager

Job Mission 

Reporting to the Lead of Business Governance and Internal Control (ICRM lead), this role strengthens business processes and controls through risk analysis, cross-functional project delivery and hands-on Power Platform development. It combines an accounting foundation, practical risk management knowledge and business operations experience to deliver operational insights and reliable monitoring and workflow solutions. 

Under the direction of the ICRM lead, the role helps operate and enhance the existing risk and control framework, strengthening operational effectiveness, accountability and the protection of company assets and reputation. It manages agreed improvement projects and acts as the Business Analyst between business users and technical teams, from requirements definition through testing, rollout and handover.

Key Responsibilities

- Perform recurring risk analytics and control reviews across financial and operational processes, including expenses, retail transactions, inventory and assets; investigate exceptions and assess their business implications.

- Validate data completeness, accuracy and reconciliation to source records before relying on reports or drawing conclusions; maintain clear definitions for indicators and exception rules.

- Translate the existing process and control framework into practical testing procedures, evidence requirements and monitoring routines; plan, coordinate and perform agreed control testing, self-assessments and field reviews, distinguishing isolated exceptions from recurring control weaknesses.

- Discuss findings and evidence with process and risk owners, propose proportionate improvements and track remediation to timely closure; provide practical guidance on control requirements and escalate material or unresolved matters to the ICRM lead.

- Independently design, build and maintain Power BI reports and dashboards, including Power Query transformations, data models, DAX measures, refresh arrangements and access controls.

- Develop Power Automate workflows for notifications, approvals, reminders, escalation and case tracking, with appropriate exception handling and safeguards against duplicate processing.

- Build and maintain fit-for-purpose Power Apps and integrate them with approved data sources and workflows, using SharePoint Lists, Forms and other supported Microsoft 365 services where appropriate.

- Translate business rules and control requirements into data structures, application logic and user journeys; verify calculations, workflow outcomes and access permissions before release.

- Work with Technology & Digital Solutions and relevant technical teams on approved architecture, data access, security, deployment and support arrangements; identify when a requirement needs specialist IT support.

- Document solution logic, dependencies, ownership and operating instructions; provide user training, troubleshoot issues and manage agreed enhancements after launch.

- Manage agreed cross-functional projects, defining scope, deliverables, milestones, dependencies, responsibilities and acceptance criteria with sponsors and business owners.

- Act as the Business Analyst between business users and technical teams: facilitate requirements discussions, map current and future processes, and translate needs into business requirements, user stories, business rules and functional specifications.

- Clarify data definitions, control points, exception scenarios and integration needs; work with technical teams to resolve design gaps and embed appropriate local control requirements in relevant global, regional and local initiatives.

- Maintain project plans, decision records and issue logs; coordinate stakeholders, surface resource constraints and scope changes, and obtain decisions from accountable owners.

- Plan and coordinate user acceptance testing, track defects and obtain business sign-off; support rollout, adoption and handover to named process and solution owners.

- Support enterprise risk assessments, risk indicator updates, management reporting and risk committee reviews with validated analysis, clear action status and follow-up of agreed decisions.

- Support policy lifecycle governance and internal audit coordination; help owners maintain appropriate records, approvals and evidence of action closure, and communicate relevant control requirements to office and retail teams.

- Contribute to the assessment and coordination of emerging risks and incidents, including reporting and remediation follow-up; escalate material matters to the ICRM lead and work with accountable owners and relevant specialists or Centres of Expertise (CoEs). Apply agreed priorities and align scope and ownership before committing to additional cross-functional work.

- University degree in Accounting, Finance, Business Administration, or an equivalent qualification supported by relevant practical experiences. CPA, CMA or CIA qualification is an advantage.

- Fluent written and spoken English, including the ability to explain business requirements, findings and solution logic to different audiences.

- Minimum of ten years of relevant cross-domain experience across at least two of the following fields: accounting or finance, internal controls, business analysis, process improvement or project delivery.

- In-house industry experience is required, with direct responsibility for ongoing business processes, reporting, controls or post-implementation operations. Consulting experience is preferred and complements this requirement.

- Practical understanding of end-to-end financial and operational flows, including record-to-report, order-to-cash, procure-to-pay, inventory and asset management.

- Demonstrated hands-on development and delivery of Power BI and Power Automate solutions, plus practical Power Apps development experience. Candidates should be able to explain their own contribution, validation approach and ongoing support responsibilities.

- Experience managing cross-functional projects and serving as a business analyst on technology-enabled initiatives, from requirements definition through UAT, rollout and handover.

- Experience in multinational environments is preferred. Retail, luxury, consumer goods or other inventory- and transaction-intensive businesses are an advantage.

- Demonstrated working knowledge and practical experience with AI.

- Connect data, business transactions and operational processes to identify meaningful risks and proportionate controls.

- Turn broad objectives into clear requirements, workable solutions and measurable acceptance criteria; maintain sound judgment when requirements or data are incomplete.

- Work directly with data and solution details, challenge inconsistent results and deliver reliable outputs with clear documentation.

- Listen carefully, facilitate decisions and explain technical matters in business language.

- Manage priorities and dependencies, follow through on commitments, and raise decisions or constraints early while maintaining clear ownership and scope.

- Exercise independent judgment, professional integrity and appropriate confidentiality; balance operational practicality with effective risk control.

- Internal: ICRM lead; CFO; business process, risk and policy owners; Retail and other division teams; TDS / IT and technical delivery teams; Regional / Global Risk & Internal Control; relevant CoEs; Internal Audit; risk committee, ELC and project sponsors as required.

- External: Approved implementation partners, solution providers and external auditors, as relevant to assigned work.