Internal Audit and Ethics Manager

JOB PURPOSE

The Job-Holder leads the Internal Audit and Compliance function as mandated by FINCO, providing independent and objective assurance and advisory services to the business.

The role is responsible for developing and maintaining a risk-based internal audit plan aligned to SA’s Risk Register; managing and overseeing the performance and quality of the outsourced (co-sourced) internal audit service provider; and reporting significant audit matters, control weaknesses and the status of agreed actions to the Audit Committee/FINCO. On an ad hoc basis, the Job-Holder conducts compliance reviews and supports fraud/irregularity investigations.

RESPONSIBILITIES:

SA business areas address key risks by implementing internal control measures

• Establish short and long term strategy for the internal audit function to support the company’s vision and strategic objectives
• Define and maintain the Internal Audit Charter and ensure alignment with approved authority, responsibility and scope.
• Develop and maintain a risk-based internal audit plan that is aligned to SA’s Risk Register.
• Determine where internal audit capabilities need to be supplemented with outsourced competencies and manage such arrangements.
• Plan, prepare and oversee all audit engagements including facilitating the outsourced internal audit for on-site visits, where required.
• Participate, in risk assessments and modify SA’s Risk Register accordingly to account for changes in the business, operational, organizational and technological environments.
• Review and approve detailed audit programs tailored to each audit to assure effective audit coverage including audit Terms of Reference, document lists, major risks, areas to be covered, identification of process owners and the timelines for the audit milestones.
• Participate, where required, in the audit fieldwork and provide technical support to smelter operations.
• Update the CEO/EXCO/Line Management on significant observations and findings in the audit reports.
• Gather Management responses, including, corrective action plans to mitigate the gaps identified and target dates to implement performance improvements.
• Ensure methodical execution of audits through proper documentation, review and analysis of evidence and identification of control gaps.
• Maintain, control and monitor a follow up tracker of open audit observations with appropriate issue escalation.
• Issue quarterly report to FINCO on the status of Audit Function and open action items.
• Support the CEO/EXCO/Line Management to provide constructive feedback to the outsourced Internal Auditors and the FINCO.
• Oversee and coordinate internal audit activities performed by the outsourced internal audit service provider and any other assurance providers engaged by SA (as applicable).
• Perform quality assurance in IA function and approve audit reports to ensure highest quality of reports.
• Evaluate the performance of the outsourced internal audit service provider against agreed scope, timelines, budget and quality standards; provide feedback and drive continuous improvement in audit delivery.
• Lead investigations into significant issues including fraud, irregularities, and major control failures and report results to senior management and governance committees.
• Maintain effective stakeholder relationships with Executive Management, Board, Audit Committee, external auditors, and regulators.

3.2 Ethics and Business Integrity

• Oversee development and execution of the annual ethics and business integrity program and provide periodic progress updates.
• Review and update as required, SA’s integrity and compliance program to ensure that appropriate standards, controls and systems are in place.
• Promote an ethical culture across the organization through targeted training, awareness campaigns, communications, and ethics roadshows.
• Review and update SA’s code of conduct to define SA’s values and provide guidance to employees and contractors on how business is conducted at SA.
• Put in place business integrity and compliance standards covering areas such as conflicts of interest, anti-corruption, anti-bribery, fraud, data privacy or others as appropriate to SA.
• Oversee implementation and maintenance of ethics policies, including:
• Code of Conduct
• Anti‑Bribery and Corruption
• Whistleblowing
• Ensure appropriate tools and processes are in place for:
• Conflict of interest disclosures
• Gifts, hospitality, and outside engagement declarations
• Provide guidance to employees on ethics matters and interpretation of the Code of Conduct.
• Implement a compliance training and communication program to help familiarize employees with SA’s standards, influence behaviours, and promote a culture based on integrity and compliance.
• Ensure that SA’s whistle blower system is available to employees should they wish to alert SA senior management of serious issues or inappropriate behaviours.
• Oversee ethics‑related training tools, e‑learning content, and awareness materials.
• Monitor ethics service providers and tools, including whistleblowing platforms.
• Liaise with external authorities (e.g., State Audit Institution, Royal Oman Police, Public Prosecution) in coordination with Legal.
• Ensure periodic reporting of ethics matters, investigation outcomes, and trends to Executive Management and FINCO.

3.3 Process Improvement:

• Liaise with the internal audit teams of the other shareholders and participate in the development of SA’s internal audit tools to improve the group’s internal audit function.
• Add value to SA by sharing “best practices” existing in other SA departments, including internal control and corporate governance concepts.
• Keep up to date with knowledge in the audit field to provide a quality service.
• Identify improvements to SA’s regulatory compliance and whistleblowing programs in consultation with the Line Management.
• Develops a plan to build up the Internal audit resources within the company

3.4 Conduct small-scale projects including:

• Investigate fraud/corruption allegations and conduct compliance audits and other related duties or assignments as directed.
• Act as the focal point for shareholders audits, if any.

3.5 Area Administration:

• Maintain the Area filing systems and adequate documentation and work papers of reports and follow up of agreed corrective action plans.
• Process service provider invoices on time and ensure all projects meet the internal audit time, cost and quality measurements thereby meeting budgetary targets.
• Control the department’s costs to ensure that budgetary targets are met.

3.6 Action the SA Environment, Health & Safety (EHS) routines to maintain

high EHS standards

• Action the SA EHS safety routines
• Conduct EHS risk assessments and raise notifications as applicable
• Maintain SA housekeeping standards (5S) in own work area

REQUIREMENTS:

Essential qualifications, experience and skills:

• Bachelor’s degree in Accounting, Finance, Business, Engineering or a related discipline.
• Professional qualification (one required): CA/CPA/ACCA/CIMA (or equivalent).
• Internal audit certification (required): Certified Internal Auditor (CIA) or equivalent internal audit certification.
• 10+ years of progressively responsible experience in internal audit, risk and controls, including leading risk-based audit planning, execution and reporting in a complex industrial/manufacturing environment (energy, metals, mining, petrochemicals or similar).
• Demonstrated knowledge and practical application of the IIA International Standards for the Professional Practice of Internal Auditing, including audit methodology, workpaper quality, supervision/quality review and reporting.
• Strong understanding of governance, risk management and internal control frameworks (e.g., COSO); ability to evaluate and improve control design and operating effectiveness.
• Experience managing/coordinating co-sourced/outsourced internal audit engagements, including Terms of Reference, scope definition, on-site logistics, review of deliverables and follow-up of actions.
• High integrity and independence; proven ability to communicate effectively with senior management and an independent Audit Committee, including escalation of significant issues.
• Strong analytical, report writing and stakeholder management skills, including the ability to influence without direct authority.
• Working knowledge of ERP and data environments (e.g., SAP) and the use of audit/data analytics tools.

Desirable qualifications, experience and skills:

• Experience auditing aluminium smelter operations or heavy industrial processes (e.g., potlines, carbon, casthouse, maintenance, power/utility operations, supply chain and major shutdowns/turnarounds).
• Fraud/forensics and investigations experience and/or certification (e.g., CFE).
• Compliance program experience (code of conduct, anti-bribery/anti-corruption, conflicts of interest, whistleblowing, data privacy) and compliance training/communications.
• Exposure to cost accounting, cost control and operational performance improvement.
• Prior experience in oil and gas or integrated energy environments.
• Quality Assurance and Improvement Program (QAIP) experience and/or participation in internal/external quality assessment.

Generic Skills:

• English language: Fluent in written and spoken English, including the ability to read, analyse and understand complex technical/business documents in English.
• EHS: Capacity to understand and apply the EHS policies, systems and management procedures required in an industrial plant. Commitment to EHS principles. The capacity to influence others to work safely.

Computer Literacy: Computer literate with working expertise in MS Office with proficiency in IT and audit tools including SAP.