My Services
I offer flexible, tailored support across internal audit, controls testing, risk advisory, and GRC framework design. Whether you need a one-off review, ongoing assistance, or help setting up your internal control environment from scratch, I provide practical, independent expertise — or work alongside your existing team to deliver what matters.
-
Control Testing
Independent testing of controls to assess design and operating effectiveness.
-
Audit & Assurance Reviews
Targeted reviews of processes, records, or themes to identify gaps and improvement areas.
-
Control Framework
Design or uplift of control frameworks aligned to business needs and risk exposures.
-
Risk Advisory & Support
Shaping risk frameworks to fit evolving risks and organisational needs.
Control Testing
Independent testing of controls to assess design and operating effectiveness.
I provide objective control testing support to help you verify whether your controls are not only well designed but also working effectively in practice. This can support internal assurance processes, regulator readiness, or ongoing compliance.
Examples of my work include:
Supporting and training business teams to perform control self-assessments, including walkthroughs and evidence validation.
Conducting SOX control testing to assess design adequacy and operating effectiveness.
Performing quarterly control testing to provide independent assurance over key financial and operational controls.
Delivering targeted assurance reviews to identify control weaknesses and recommend practical improvements.
Audit & Assurance Reviews
Targeted reviews of processes, records, or themes to identify gaps and improvement areas.
These reviews help organisations gain insight into specific areas of concern, new processes, or historical issues. The goal is to surface control gaps, procedural weaknesses, or non-compliance early.
Examples of my work include:
Conducting expense audits to identify policy breaches, unusual transactions, and non-compliant spending patterns.
Reviewing onboarding and offboarding processes to assess control effectiveness, ownership, and risk exposure.
Performing targeted reviews on areas such as data privacy, third-party arrangements, or delegated authority compliance.
Providing independent insights to senior management on recurring control issues and areas for uplift.
Internal Control Frameworks
Design or uplift of control frameworks aligned to business needs and risk exposures.
I work closely with you to build internal control frameworks that are practical, risk-aligned, and scalable. Whether you need to build from scratch or uplift your existing matrix, I tailor our approach to your sector and operations.
Examples of my work include:
Developing a control taxonomy and control matrix for an education provider, mapped to their risk register and business processes.
Re-designing a control framework for a fast-growing FMCG company to support IPO-readiness.
Aligning internal control structures to COSO or ISO-based frameworks for better governance and clarity.
Creating user-friendly guidance and templates to embed control ownership across business units.
Risk Advisory & Support
Shaping risk frameworks to fit evolving risks and organisational needs.
I support organisations in strengthening their risk management practices by bringing structure, clarity, and an independent perspective. Whether you're building a risk register, planning a workshop, or uplifting your risk framework, I can help.
Examples of my work include:
Advising on the design and implementation of risk frameworks and enterprise risk strategies tailored to organisational context.
Supporting the development and articulation of Risk Appetite Statements (RAS) to guide decision-making and resource prioritisation.
Defining and clarifying roles and responsibilities for effective risk governance across all three lines of defence.
Designing risk and control dashboards to improve visibility, monitoring, and executive reporting.