Internal Control Officer (Compliance, Information Security Officer, Enterprise Risk Mgt., Legal / Company Secretary and Executive Office/Special Assistant)

Internal Control Officer (Compliance, Information Security Officer, Enterprise Risk Mgt., Legal / Company Secretary and Executive Office/Special Assistant)

Pishon & Brooks Advisory Services Limited (PBAS) is a professional services firm that supports her clients by managing their end-to-end HR Processes in order to enhance their productivity and growth aspirations.

Internal Control Officer (Compliance, Information Security Officer, Enterprise Risk Management, Legal / Company Secretariat and Executive Office Control Officer)

• Job Type Full Time
• Qualification BA/BSc/HND , Professional Certificate
• Experience 6 years
• Location Lagos
• Job Field Risk Management and Compliance

JOB PURPOSE

• The Compliance, Information Security, Enterprise Risk Management, Legal/Company Secretariat, Executive Office Control Officer is responsible for providing independent control oversight and assurance across Compliance, Information Security, Enterprise Risk Management, Legal/Company Secretariat, Executive Office, and assigned subsidiary functions.
• The role supports the effectiveness of the organization’s governance and control framework through risk-based reviews, control testing, compliance monitoring, governance assessments, incident investigations, and advisory support. The incumbent works closely with business and control functions to ensure adherence to regulatory requirements, internal policies, governance standards, and industry best practices while supporting the achievement of organizational objectives.

DUTIES & RESPONSIBILITIES

Governance and Control Assurance

• Lead risk-based control reviews across Compliance, Information Security, Enterprise Risk Management, Legal/Company Secretariat, Executive Office, and assigned subsidiary functions.
• Assess the adequacy and effectiveness of governance frameworks, policies, procedures, and internal controls.
• Conduct periodic control testing and independent reviews to evaluate compliance with approved standards and regulatory requirements.
• Review governance structures, committee activities, policy administration processes, and decision-making frameworks to ensure compliance with corporate governance requirements.
• Evaluate the effectiveness of whistleblowing, ethics, and governance-related processes and controls.
• Monitor implementation of governance policies, standards, and control requirements across assigned functions and subsidiaries.

Compliance and Regulatory Oversight

• Monitor compliance with applicable regulatory requirements, including CBN regulations, NDPR requirements, AML/CFT obligations, PCI DSS standards, ISO standards, and other relevant regulatory frameworks.
• Review regulatory submissions, compliance reports, and control documentation for completeness and accuracy.
• Track regulatory observations, audit findings, and compliance exceptions to ensure timely remediation.
• Support reviews arising from regulatory examinations, audits, and governance assessments.
• Escalate regulatory breaches, policy violations, and control deficiencies promptly.

Information Security and Risk Management Reviews

• Perform control reviews of information security governance processes, cybersecurity controls, access management, data protection practices, and related risk management activities.
• Assess compliance with information security policies, standards, and regula