Manager: Internal Controls at Anglo American

Job Description:

Actively participate in and be a member of the GSS global leadership team (LT), with direct responsibility for leading the global (EMEA, APAC, LATAM) GSS Internal Control, Risk Management and Compliance (IRC) organisation, driving improvement, strategic thinking, and demonstrating leadership behaviours.

Your key responsibilities will include: 

• Creation of the overall IRC strategy and approach to ensure that the Global Shared Services (GSS) business unit can identify, assess, respond and monitor risks associated with its operations.

• Directs global internal controls team to ensure that risks are subjected to the GSS risk management framework and that responses are effective (application, implementation, and reporting).

• Develop, maintain and manage the GSS Risk Register.

• To advise, influence, and direct the GSS leadership team across the global regions in areas of internal control, risk, governance, and compliance.

• Engage with key stakeholders across BUs and Functions to ensure that the Group and GSS’ approach to risk management, governance & compliance is implemented throughout the GSS organisation.

• Directs global internal controls team to ensure that risks are subjected to the GSS risk management framework and that responses are effective (application, implementation, and reporting).

• Ensure that there is adequate monitoring and reporting of GSS risk, assurance, and compliance posture via appropriate forums.

• Chair the GSS Governance, Risk, and Compliance Committee.

Risk Management:

• Ensure that the portfolio of risks that the GSS is exposed to is in a state of continuous management by using the GSS Risk Register and associated risks management processes and frameworks.

• Create the global GSS Risk Management strategy to ensure that the GSS can identify, assess, respond and monitor risks associated with its operations.

• Ensures that risks are subjected to the GSS risk management framework and that responses are effective (application, implementation, and reporting).

• Review and refine the headline risk categories for GSS.

• Conduct risk workshops (with support of Group Risk/Group Assurance functions) to identify, assess, quantify, and respond to risks while ensuring that risks are assigned to owners.

• Liaise with GSS Leadership Team to ensure that risk and control matrices (RACM) critical controls on process level are identified and considered in the risk register.

• Implement dynamic risk assessment processes to identify and manage key risk indicators (by leveraging data and technology) to act as early warning systems.

Compliance:

• Ensure that the GSS complies with all Group/External Compliance requirements.

• Ensure clarity of requirements exist across the GSS for sustaining compliance and ensure that the GSS complies with its applicable global obligations.

• Manage the end-to-end attestation process and ensure that key GSS controls (that impacts Anglo American’s financial processes) are attested to accordingly by the relevant control owners.

• Ensure that financial reporting related RACM’s and relevant process flow documentation are maintained to reflect any changes in business operations and its risk exposure.

• Ensure that process documentation that supports the execution of compliance requirements is relevant and consistent.

• Controls framework design: Ensure that changes to business processes/controls and impact on compliance scope and attestation is considered.

• RACM Change Management: Ensure that new risks/controls are identified for inclusion in the RACMs.

• Ensure that a training plan (content and delivery) is developed to enable sustained compliance requirements.

• Ensure that all compliance-related activities follow the standards and guidelines defined by the Group GRC function.

Internal Controls Testing:

• Develop a strategy and approach for assessing the adequacy of the GSS internal control environment.

• Perform ad-hoc and planned control reviews to assess the adequacy and effectiveness of the control environment.

• Develop system reports to identify potential lack of controls (proactive health check reports).

• Ensure that control deficiencies are considered in the Risk Register and appropriate remediation plans are identified, agreed with process/control owners, tracked and reported on.

• Liaise as a key stakeholder with Anglo IM team to support governance of applications and users across GSS processes

Training and Communication:

• Work with GSS HR teams to identify risk management training needs and oversee the development of risk competence/culture and awareness across the GSS business unit.

• Work with GSS LT to ensure that there are regular training initiatives on all key controls or control changes.

• Report on policy and procedure document training conducted by operational managers.

Incident Management:

• Establish and implement the framework by which incidents across the GSS (particularly those impact service delivery) are raised and responded to sure that they do not reoccur.

• Oversee trend and Root Cause Analysis (RCA) performed by the GSS LT and ensure lessons from RCA’s are operationally implemented.

• Ensure that outcomes of the incident management process are responded to appropriately with the aim of controlling risk exposure and improving the operational effectiveness of the GSS with Business Improvement partners.

• Oversee the development of proposed controls and actions to mitigate the risk.

• Monitor implementation of action plans to ensure risk mitigation efforts are proceeding as required.

Assurance:

• Be the single point of contact for all audits (internal and external) and maintain the GSS assurance schedule.

• Assist in agreeing and approving the GSS assurance/audit plan.

• Ensure readiness of the GSS internal control environment for assurance activities.

• Perform ad-hoc and planned control reviews to assess the adequacy and effectiveness of the control environment.

Continuous Improvement:

• Report on the implementation of proposed controls and actions identified through the incident management processes and RCA’s.

• Obtain information on current and emerging risks; assess the impact on the GSS environment; develop mitigating actions and report e.g. compliance with new legislative and statutory requirements e.g. JSE, GDPR, ICFR etc.

• Ensure incorporation of risk management disciplines and objectives within GSS Team commitments.

• Support Anglo American’s wider standardisation and finance transformation project, acting as a key stakeholder who supports development, transition to and implementation of new processes and controls

Reporting:

• Develop risk report requirements (operational level and executive summary level).

• Provide reports / IRC dashboard to key stakeholders as required, including the GSS Governance, Risk and Compliance Committee and Group Functions Audit Committee.

Health, Safety & Environment:

• Demonstrate behaviour in line with health, safety, and environmental standards and with the Group’s values.

• Set the health, safety and environmental expectations for your team and monitor behaviour so that it meets the required standards.

• Participate in relevant safety audits, inspections and observations, and address issues as part of demonstrating safety leadership.

People / Leadership:

• Demonstrate behaviour in line with the Group’s values, standards and a professional workplace.

• Provide leadership to and develop the performance of the wider team in line with the Group’s policies and systems (e.g. performance management) to achieve business goals. As part of this:

• Foster a constructive and productive working environment.

• Monitor the work of each team member and provide regular and useful feedback to them on how they are performing and;

• Drive delivery of objectives holding team members to account for their work.

• Participate as an effective team member in working collaboratively with your leader, peers and relevant others (including from other teams) to achieve business goals.

• Monitor the activities of your team which involve other teams and appropriately intervene to address any cross-team issues.

Work Processes:

• Fully understand all GSS policies, processes and systems which apply to your team’s work and provide leadership so that your team works within these.

• Identify any issues around these that interfere with the ability of your team to complete work or meet the plan/strategy. For processes within your authority, make the required changes. For others, escalate these issues to seek action and/or look for alternative solutions.

This role at a Band 5 Level reporting to the Head of Global Shared Services and has 6 regional direct reports

Qualifications:

Required Qualifications:

• A Bachelor’s Degree in Auditing/Finance/ Risk, compliance, and governance law or equivalent is a minimum requirement.

• Completed Bachelor’s Degree in Auditing, Finance, Risk, Compliance, and/or Governance Law or equivalent is a minimum requirement.

• Completed or in the process of completion of a commercial postgraduate qualification, certification, and/or professional registration (IIA, CRM Prac., CIA, MBA, MBL, etc.) would be advantageous.

• Registration with a professional body as a Chartered Auditor (Institute of Internal Auditors) or Master’s in Business Administration would be advantageous.

 Required Experience:

• A minimum 10 years’ experience at a managerial level in a Risk & Compliance / Audit environment with a JSE listed organisation.

• Experience in auditing principles and practices.

• Understanding of Institute of Internal Auditors standards and COSO ERM and Internal Control Framework.

 Other Requirements:

• Advanced computer literacy including MS Office Suite.

• Experience in the use of SAP and/or other similar enterprise software.

Additional information:

Anglo American Limited, Global Shared Services – Group Finance

Anglo American has set its Burning Ambition to be the most valued mining company by all its stakeholders by 2023.  A high-performing Global Shared Services (GSS) function, able to assist in driving the functional transformation agenda, as well as provide a broad range of critical support services to the business, is a key enabler to delivering this strategic objective.

The transformation of the existing GSS organisation will lay the foundations for GSS ambition to be a strategic asset for Anglo American and is therefore a critical project on the roadmap to delivering the Burning Ambition. 

Core to delivering the GSS vision is a customer-centric approach to service management that clearly defines accountabilities across end-to-end processes and enables meaningful performance discussions between GSS, the Business Units and Functions.