Risk & Assurance Analyst

• The Risk and Assurance Analyst provides operational and analytical support to the Senior Specialist in strengthening the effectiveness of Internal Audit’s strategic assurance functions. This role assists in the coordination and administration of Enterprise Risk Management (ERM), Quality Assurance & Improvement Programme (QAIP), Combined Assurance activities, Internal Audit capability initiatives, and Business Continuity Management (BCM) processes within a dynamic FMCG manufacturing and distribution environment. The incumbent plays a key support role in maintaining governance documentation, preparing reports, assisting in coordinating workshops, tracking actions, and ensuring that frameworks remain updated and practically embedded across the organisation.

WHAT YOU WILL DO:

Enterprise Risk Management (ERM) Support

• Maintaining the enterprise risk register and risk universe.
• Coordinating risk workshops with business units and document outputs.
• Consolidating risk reports for Exco and Audit & Risk Committee submissions.
• Tracking risk mitigation actions and follow up with risk owners.
• Supporting alignment of risk insights to the annual internal audit plan.

Quality Assurance & Improvement Programme (QAIP)

• Administration and tracking of the Internal Audit QAIP.
• Performing post-engagement QAIP reviews using approved checklists.
• Monitoring corrective actions arising from internal quality reviews.
• Maintaining documentation for external quality assessments (5-year reviews).
• Tracking methodology updates and ensuring version control of audit templates.
• (Aligned to The Institute of Internal Auditors Standards.)

Combined Assurance Coordination

• Maintaining the Combined Assurance matrix across the three lines of defence.
• Coordinating inputs from Risk, Compliance, SHEQ, External Audit, and Operations.
• Updating assurance coverage maps and highlighting duplication or gaps.
• Preparing consolidated reports for submission to the Audit & Risk Committee.
• (Aligned to the King IV Report on Corporate Governance for South Africa 2016 Combined Assurance principles.)

Business Continuity Management (BCM) Support

• Maintaining Business Continuity Plans (BCPs) for key sites.
• Tracking BCM testing schedules and document outcomes.
• Supporting crisis simulation exercises and capture lessons learned.
• Maintaining BCM contact lists and recovery documentation.
• Monitoring action plans arising from incidents or test results.

Internal Audit Capability Support

• Coordinating internal training sessions and CPD tracking for auditors.
• Assisting in developing training materials (methodology, risk-based auditing, FMCG risks).
• Maintaining the Internal Audit competency matrix.
• Supporting onboarding of new audit team members.

Operational & Reporting Responsibilities

• Preparing monthly dashboards and governance reports.
• Maintaining structured electronic filing of ERM, QAIP, and BCM documentation.
• Ensuring data accuracy in risk and assurance systems.
• Providing analytical support (trend analysis, risk scoring, assurance coverage metrics).

WHAT YOU WILL BRING TO THE TABLE:

Experience & Qualifications

Education:

• Qualified CA (SA).
• Progress towards a further professional certification (e.g., CIA, CRMA) advantageous.

Experience:

• 3–5 years’ experience in audit, risk management, compliance, or governance.
• Experience in FMCG, manufacturing, or logistics preferred but not essential.

Technical Skills:

Working knowledge of:

• IIA Standards
• COSO ERM framework
• King IV principles
• Microsoft Excel (advanced), PowerPoint, and reporting tools
• Risk register or GRC systems