Senior Risk & Internal Control Manager

General:
• As part of the Enterprise Governance Risk and Control (EGRC) team, drive Royal FrieslandCampina (RFC) control activities and review various business requests related to risk & control (e.g. risk deep-dives, control implementations, control optimizations, global policy establishment & control standard setting, etc.)
• Drive RFC's distributor internal control compliance activities (i.e. monitor compliance, follow up on exceptions and perform investigations)
• Continuously creating awareness of internal controls and enhancing the risk & control culture and mindset within the organisation.
Specific:
• Perform risk-based internal control set (ICF) scoping by alignment with organisation and Compliance team
• Roll-out new/enhanced controls and provide expertise towards more junior team members
• Plan and coordinate control testing activities including training of assessors and perform own (design) assessments and quality review.
• Review of ICF findings, design remediation plan with control owner, follow up with entities to ensure complete and timely closure of ICF findings
• Periodic (HY1, Q3 and Q4) reporting to Management on ICF performance (Sign-off Management statement, ICF dashboard and findings list)
• Coordinate the follow up on identified distributor exceptions and work with stakeholders to implement improvement actions
• Plan and coordinate specific distributor deep-dive and investigation(s)
• Periodic reporting of distributor internal controls compliance status to Management
• Perform periodic assessment on Segregation of Duties (SOD) conflicts and critical access right review
• Work with organization and Governance and Technology team to reduce SOD conflict and critical access
• Coordinate SOD improvement activities
• Coordinate with Corporate Internal Audit (CIA) and entities on audit planning and execution (i.e. audit timing, scope, assessment questions, arranging meetings, on-site support, gathering of audit evidences)
• For audit issues raised, work with entities to define effective and efficient remediation action plans (determine action owner and realistic deadline for audit issues)
• Follow up with action owners to ensure complete and timely closure of audit issues
• Periodic reporting to Management on status of audit issues
• Coordinate with entities to prepare required control documents based on external audit request, including explaining of business processes and control environment of entity.
• Participate in global/regional Risk & Control related engagements and support larger or manage smaller Risk & Control engagement based on subject matter expertise