We are looking for an Internal Audit Senior to join our Legal group, as we scale up and drive digital and financial inclusion across our markets.

Job Purpose

You will support the Head of Audit & Risk to lead the delivery of M-KOPA’s Internal Audit function at a strategic level across all five operating markets (Kenya, Uganda, Nigeria, Ghana, and South Africa). You will own the risk-based audit strategy, drive multi-market planning and governance, provide direction on complex or cross-market audits, and translate emerging risk intelligence into executive insight.

This role is designed for strategic leadership and advisory influence.

Key Job Functions

Audit Strategy, Planning & Governance

• Contribute to the development of the annual risk-based audit plan, translating strategic objectives and risk exposure into a prioritised, clearly scoped portfolio of audits.

• Monitor delivery against the approved plan (progress, coverage, timeline, and resourcing), and recommend adjustments based on emerging risks or changes in the operating environment.

• Own the Internal Audit meeting agenda, curating discussion items and ensuring coordination across the team.

• Own the Audit Tracker management.

Audit Oversight, Quality & Reporting

• Determine and agree on the audit scope for complex, high-risk, or cross-market engagements, and provide strategic direction to the audit teams delivering them.

• Execute assigned higher risk audits from the approved annual audit plan end-to-end (planning, fieldwork/testing, documentation, reporting, and follow-up), in line with IIA standards and internal methodology.

• Assist the HOD in reviewing audit working papers and reports to ensure they are complete, accurate, and supported by sufficient evidence in line with IIA standards and internal methodology. Ensure deliverables clearly articulate root causes, risk impact, and practical recommendations.

• Present outcomes to stakeholders, synthesising findings, risk trends, and action-closure rates into concise executive insight.

• Partner with the Risk function to review close-out evidence, ensuring remediation actions are properly evidenced, sustainable, and well-documented. Proactively track action plans and drive timely closure through structured follow-ups, escalation of overdue items, and clear reporting on progress, blockers, and residual risk.

• Link emerging risks and investigations outcomes to the audit planning.

Stakeholder Management & Advisory

• Build and maintain trusted advisory relationships with Country Heads, functional leads, and governance forums (ExCo/C-Team and Board Audit Committee).

• Provide strategic input on governance, risk, control, and compliance matters, including control design and remediation planning.

• Coordinate timely communication/escalation of significant risk exposures, control issues, fraud risks, and governance failures to the Head of Audit & Risk and senior management.

• Deliver consulting/advisory engagements as requested (e.g., reviews of key initiatives, third-party risks, and emerging risk themes).

Audit Innovation & Function Development

• Champion adoption of M-KOPA’s technology and AI capabilities to enhance audit planning and execution (e.g., risk sensing, scoping, testing, and reporting) while maintaining independence, governance, and confidentiality.

• Embed data analytics and continuous monitoring approaches into audit delivery to strengthen coverage, increase efficiency, and enable earlier identification of emerging risks across markets.

• Drive standardisation and quality uplift through modern audit tooling (e.g., audit management platforms, workflow automation, and digital working papers), including clear controls over evidence, versioning, and review.

• Build capability within the Internal Audit team through coaching and knowledge transfer on analytics- and AI-enabled audit techniques, and contribute to the development of related methodology/standards.

• Support the Head of Audit & Risk on strategic projects and function development initiatives as required.

Risk Management

• Support the development and maintenance of M-KOPA's Enterprise Risk Management Framework, including contributing to risk identification and assessment processes across operating markets.

• Assist in tracking and reporting on Key Risk Indicators (KRIs) and the Risk Appetite Framework, and support the preparation of risk reports for the Board Audit & Risk Committee.

• Participate in cross-functional risk reviews, including operational, regulatory, and reputational risk workstreams, and help maintain the company's risk register and mitigation action logs.

Organisation Structure

Reports to Head of Internal Audit & Risk

Experience, Skills & Qualifications

Education

• Degree in a business-related field, IT, Business Information Systems, or a related technical/business field from a recognised university.

• Professional certification required: Certified Internal Auditor (CIA), Certified Public Accountant (CPA), and/or Certified Information Systems Auditor (CISA).

• A master’s degree is an added advantage.

• Additional qualifications (e.g., CISM, C-RISK) are an added advantage.

Experience

• Minimum of 8 years’ audit, risk, and compliance experience within an established external audit, internal audit, and/or enterprise risk management function at an external audit firm, financial services company, or other reputable business.

Skills

• Good knowledge of internal audit execution across both business process functions and technology functions.

• Good knowledge of risk management.

• Strong collaboration and stakeholder management.

• Demonstrated history of leading teams to successfully deliver engagements (internal audit, strategy, and/or external advisory).

• Well-versed in IT control frameworks.

• Working knowledge of the Sarbanes–Oxley Act (SOX) and Internal Control over Financial Reporting (ICFR) concepts, including the practical application of control design, testing, and remediation.

• Experience using modern audit execution and audit management software.

• Ability to maintain the highest levels of integrity, confidentiality, and objectivity.

Why M-KOPA?

At M-KOPA, we empower our people to own their careers through diverse development programs, coaching partnerships, and on-the-job training. We support individual journeys with family-friendly policies, prioritize well-being, and embrace flexibility.

Join us in shaping the future of M-KOPA as we grow together. Explore more at m-kopa.com.

Recognized four times by the Financial Times as one Africa's fastest growing companies (2022, 2023, 2024, 2025 and 2026) and by TIME100 Most influential companies in the world 2023 and 2024 , we've served over 7 million customers, unlocking $1.5 billion in cumulative credit for the unbanked across Africa.

Important Notice

M-KOPA is an equal opportunity and affirmative action employer committed to assembling a diverse, broadly trained staff. Women, minorities, and people with disabilities are strongly encouraged to apply.

M-KOPA explicitly prohibits the use of Forced or Child Labour and respects the rights of its employees to agree to terms and conditions of employment voluntarily, without coercion, and freely terminate their employment on appropriate notice. M-KOPA shall ensure that its Employees are of legal working age and shall comply with local laws for youth employment or student work, such as internships or apprenticeships.

M-KOPA does not collect/charge any money as a pre-employment or post-employment requirement. This means that we never ask for ‘recruitment fees’, ‘processing fees’, ‘interview fees’, or any other kind of money in exchange for offer letters or interviews at any time during the hiring process.

Applications for this position will be reviewed on a rolling basis. Shortlisting and interviews will take place at any stage during the recruitment process. We reserve the right to close the vacancy early if a suitable candidate is selected before the advertised closing date.

If your application is successful M-KOPA undertakes pre-employment background checks as part of its recruitment process, these include; criminal records, identification verification, academic qualifications, employment dates and employer references.