Group Internal Auditor - Quality, Risk & Compliance

About the role

The Group Internal Auditor - Quality, Risk & Compliance provides independent assurance on the adequacy and effectiveness of internal controls, risk management and compliance processes across all Q-Sourcing Servtec entities. The role reports administratively to the Group CEO and functionally to the relevant Board Committee, strengthening governance, driving risk-based audit planning and promoting a culture of accountability, safety and continuous improvement.

Key responsibilities

• Ensure audit independence, avoiding direct ownership of operational activities such as training delivery or policy implementation.
• Develop an Internal Audit Charter, policies and procedures, and a risk-based audit plan covering contract management, compliance and EHS performance.
• Maintain a Group risk management framework and corporate risk register, updated quarterly, and evaluate the effectiveness of risk management and internal controls.
• Monitor statutory, regulatory and policy compliance across subsidiaries, collaborate with management on ISO, labor, tax, data protection and safety standards, and promote quality assurance and process standardization.
• Conduct periodic EHS audits, evaluate incident management and track corrective actions.
• Oversee fraud detection, anti-bribery/anti-corruption initiatives and the whistleblowing mechanism, ensuring investigations are documented and escalated.
• Use audit management and analytics tools to improve audit coverage and identify anomalies, and support automation and data-driven insights.
• Advise on governance structures and internal controls, prepare quarterly audit reports to the Board and CEO, and support preparation for external audits, certifications and due diligence.

Required profile

• 8-10 years' experience in internal audit, risk and compliance, with East Africa or multi-country exposure.
• Professional certification such as CPA, CISA or CIA (or equivalent).
• Proven knowledge of risk-based auditing, ERM and compliance frameworks, and experience advising leadership on governance and risk.
• Excellent stakeholder engagement, communication and reporting skills.

Required skills

• Risk-based auditing, ERM and compliance frameworks
• Audit management software and data analytics tools
• Knowledge of ISO 9001 is an added advantage