Head of Internal Audit
Bermuda Commercial BankRole Purpose:
The Head of Internal Audit is responsible for leading an independent and objective internal audit function that provides assurance to the Board Audit Committee and Executive Management on the effectiveness of the BCB Group's governance, risk management, and internal control framework.
The role is accountable for developing and delivering a risk-based audit plan that evaluates the adequacy and effectiveness of financial, operational, regulatory, technology, and strategic controls across the Group. The Head of Internal Audit acts as a trusted advisor to the Board Audit Committee and Executive Management, providing insight on emerging risks, regulatory developments, operational resilience, cybersecurity, digital transformation, and business change initiatives.
The role ensures the internal audit function operates in accordance with the Internal Audit Charter, the International Professional Practices Framework (IPPF) and all applicable regulatory requirements, while promoting a strong culture of accountability, risk awareness and continuous improvement across the organisation.
Key Accountabilities and Responsibilities:
- Assist the Board of Directors and Executive Management in accomplishing their objectives by bringing a systematic and disciplined approach to evaluating, improving, and maintaining the effectiveness of the BCB Group’s risk management, internal controls, and governance processes.
- Serve as a trusted advisor to the Board Audit Committee and Executive Management on emerging risks, governance developments, regulatory change, technology transformation, and evolving industry practices.
- Challenge the Board of Directors and Executive Management to improve, where applicable, the effectiveness of risk management, internal controls, and governance process of the BCB Group.
- Execute organisation-wide risk assessments to identify significant risks or exposure related to internal controls or compliance with the BCB Group’s policies and procedures, laws and regulations, and efficiency of operations. Provide feedback and recommendations on business risks and improving operational efficiencies and processes, where appropriate.
- Develop annually a risk-based internal audit plan for BAC review and approval. Oversee the implementation of the approved plan, ensure proper resourcing for implementation of the plan, and adjust the plan as needed in response to changes in the BCB Group’s strategy, business risks, operations, programs, systems, products and controls. Keep Executive Management and BAC apprised of any needed changes to the plan.
- Provide independent assurance over strategic transformation initiatives, digital banking programmes, technology modernization activities, fintech partnerships, and emerging digital financial services to ensure appropriate governance, risk management, regulatory compliance, and control effectiveness throughout delivery and ongoing operations.
- Ensure methodical documentation of work plans, testing results, conclusions, and recommendations. Follow up and track findings and validate closure of findings through the satisfactory design and/or implementation of corrective actions.
- Coordinate and assist with the preparation of BAC meeting materials. Participate in quarterly or more frequent BAC meetings.
- Evaluate specific operations at the request of BAC or Executive Management, as appropriate.
- Maintain current knowledge of regulatory and legislative developments impacting the BCB Group, as well as leading practices and international auditing standards, and ensure these considerations are appropriately reflected in the internal audit strategy, plan, and methodology.
- Promote the use of data analytics and continuous auditing techniques to enhance audit coverage, identify emerging risks, and improve the efficiency and effectiveness of the internal audit function.
- Lead the development and execution of a risk-based technology audit programme covering digital banking platforms, cybersecurity, cloud services, APIs, data governance, technology change management, IT general controls, and emerging technologies.
- Evaluate and provide independent assurance over emerging business activities, including but not limited to digital assets, fintech partnerships, payment solutions, digital wallets, merchant acquiring, and new product propositions to ensure risks are identified, assessed, and managed appropriately.
- Provide independent assurance regarding the effectiveness of the Bank's operational resilience framework, including important business services, outsourcing arrangements, business continuity, crisis management, cyber resilience, and incident management.
- Liaise with external auditors, the Regulator, and internal compliance and risk management functions.
- Establish and assign departmental objectives, aligned with the BCB Group’s objectives, to team members and formally evaluate their performance in accordance with the BCB Group’s annual performance evaluation process.
- Provide effective leadership to team members through coaching, mentoring, and development of career paths.
Qualifications and Experience
- University Degree in Business, Accounting or a related discipline.
- A professional accounting qualification (CPA, CA, ACA or ACCA).
- Internal audit qualification (e.g. CIA) is preferred.
- Minimum of ten (10) years’ progressive experience in banking or financial services including at least four (4) years in a senior internal audit, financial audit, control, or process review role with responsibility for leading complex audits, influencing senior stakeholders, and providing assurance at Board or Executive Management level, or demonstrated superior experience at an equivalent senior level
- Demonstrated experience presenting to Audit Committees, Boards of Directors, and financial services regulators
- Experience in Temenos T24 Core banking system, NetInfo, Great Plains and Viewpoint preferable
- Experience auditing or providing assurance over digital banking platforms, payment systems, fintech businesses, digital asset services, online banking, or technology-enabled financial services environments
- Advanced knowledge in spreadsheet development, risk analysis, general accounting and financial analysis
- Sound multi-focus skills and the ability to work under pressure, adhere to tight deadlines and work overtime when required
- Demonstrated strong communication skills, both written and verbal
- Ability to work independently and take overall ownership of tasks
- Excellent Microsoft Office, Word, Excel and Outlook skills