Financial Controller: Sox & Internal Controls

Location: Cape Town (must be willing to travel locally) Workplace Type: Hybrid Skill Level: Senior Management Level Reports To: Chief Financial Officer Job Description Company Brand: Lesaka Enterprise Division Purpose of Job Lesaka Technology is dual-listed on the Nasdaq and Johannesburg Stock Exchange (JSE), and as such is subject to the requirements of the Sarbanes‐Oxley Act of **** (SOX), including Sections 302 and 404.
The Financial Controller: SOX & Internal Controls is a senior leadership role within the Lesaka Enterprise Division, carrying full accountability for the design, implementation, maintenance, and ongoing compliance of the SOX internal control framework across the division.
The incumbent will serve as the subject‐matter expert and functional lead for all matters relating to internal controls over financial reporting (ICFR), risk and control matrices, control testing, deficiency management, and SOX 404 attestation.
This role operates at the intersection of finance, internal audit, and governance, requiring a candidate who combines deep technical SOX expertise with strong commercial acumen and stakeholder engagement capability.
The role requires a qualified professional with demonstrable experience in SOX programme design and implementation, gained either within a Big 4 audit firm or in a listed commercial environment.
The Financial Controller: SOX & Internal Controls reports to the CFO and engages directly with the Group Internal Audit function, external auditors, and the Audit Committee on all SOX‐related matters.
The Financial Controller: SOX & Internal Controls responsibilities include the following: Key Performance Areas SOX Programme Design and Implementation Lead the end‐to‐end design, build‐out, and implementation of the SOX internal controls programme for the Lesaka Enterprise Division.
Establish and maintain the SOX scoping methodology, determining which processes, systems, and accounts are in‐scope based on materiality and risk.
Develop and maintain the Risk and Control Matrix (RCM) for all in‐scope financial reporting processes, ensuring controls are appropriately designed to address identified risks.
Define control objectives, control activities, and evidence requirements across key process areas including Revenue, Procure‐to‐Pay, Financial Close, Treasury, Payroll, and IT General Controls (ITGCs).
Drive the initial SOX implementation roadmap and manage the programme to completion within agreed timelines, engaging stakeholders across finance, operations, and IT.
Ensure the SOX framework is aligned to the COSO Internal Control – Integrated Framework and Nasdaq/SEC regulatory requirements.
Internal Control Environment Own and maintain the Enterprise Division's internal control environment, ensuring controls are appropriately designed, documented, and operating effectively at all times.
Conduct periodic process walkthroughs with control owners to validate that documented controls reflect actual operating practice.
Identify control gaps, design weaknesses, and operating deficiencies; assess their severity and drive timely remediation.
Maintain a centralised control repository and ensure all process narratives, flowcharts, and control documentation are current and complete.
Embed a strong control‐awareness culture across the Enterprise Division by providing training, guidance, and ongoing support to control owners and process leads.
Coordinate with IT and systems teams on the design and assessment of IT General Controls (ITGCs) and IT Application Controls (ITACs) relevant to financial reporting.
SOX 302 and 404 Compliance Manage the annual SOX 404 assessment process, including control testing planning, scheduling, execution oversight, and results reporting.
Coordinate and support the quarterly SOX 302 sub‐certification process across the Enterprise Division, ensuring disclosures are accurate and supported.
Oversee the preparation of management's assessment of ICFR for inclusion in the annual report on Form 20‐F or equivalent Nasdaq/SEC filing.
Ensure timely identification, documentation, classification, and remediation of control deficiencies (significant deficiencies and material weaknesses).
Maintain a deficiency tracker and provide regular status updates to the CFO and Audit Committee on open items and remediation progress.
Liaise with the Group's external auditors (PCAOB‐registered) on the integrated audit of ICFR, serving as the primary divisional point of contact.
Internal Audit Coordination and Relationship Management Serve as the primary liaison between the Enterprise Division and the Group Internal Audit function on all SOX‐related matters.
Coordinate internal audit access, information requests, and walkthroughs during SOX testing and internal audit reviews.
Review internal audit findings relating to ICFR and assess their SOX implications; develop management responses and remediation action plans.
Leverage internal audit results to continuously improve the control environment and reduce duplication of testing effort where possible.
Support the development of the internal audit plan by providing input on key risk areas and control priorities within the Enterprise Division.
Control Testing and Quality Assurance Design and oversee the annual control testing plan, covering both management testing (1st line) and coordination with internal audit testing (2nd line).
Review and approve test of design (TOD) and test of operating effectiveness (TOE) workpapers to ensure they meet quality and evidence standards.
Assess and conclude on control test results, applying appropriate professional judgement to deficiency classification.
Maintain a continuous monitoring approach to high‐risk controls, ensuring issues are identified and addressed between formal testing cycles.
Track remediation testing for previously identified deficiencies and confirm operating effectiveness prior to period‐end reporting.
Governance, Reporting and Stakeholder Engagement Prepare and present SOX status reports, dashboard updates, and ICFR assessments for the CFO, EXCO, and Audit Committee.
Provide input into the Audit Committee's assessment of the effectiveness of the Group's system of internal controls.
Engage proactively with Group finance, Group risk, and the JSE Sponsor on governance and disclosure matters relating to internal controls.
Respond to queries from Nasdaq, the SEC, JSE, or other regulators relating to ICFR and internal control disclosures where required.
Ensure all SOX governance activities are documented and retained in accordance with record‐keeping requirements under the Sarbanes‐Oxley Act.
Process Improvement and Automation Identify opportunities to streamline, automate, and improve the SOX compliance programme to reduce manual effort while maintaining control rigour.
Leverage GRC (Governance, Risk and Compliance) tools and technology to enhance control monitoring, documentation, and reporting.
Drive continuous improvement in financial reporting processes within the Enterprise Division to reduce inherent control risk.
Stay abreast of changes in SOX regulation, SEC guidance, PCAOB standards, and COSO framework updates, and assess implications for the Enterprise Division.
Experience Minimum 3–5 years' relevant experience, with a strong track record in SOX design, implementation, and compliance.
Experience gained at a Big 4 audit firm (Deloitte, PwC, EY, or KPMG) in an external or internal audit capacity, OR equivalent commercial experience in a Nasdaq‐ or SEC‐registered listed entity – required.
Demonstrable hands‐on experience designing and implementing a SOX programme from the ground up, including scoping, RCM development, control documentation, and testing frameworks.
Deep technical knowledge of SOX Sections 302 and 404, COSO Internal Control – Integrated Framework, and PCAOB Auditing Standard No. ****.
Experience managing IT General Controls (ITGCs) and IT Application Controls (ITACs) in a SOX context.
Proven experience engaging with external auditors on ICFR‐related matters in a listed company environment.
Experience presenting to and engaging with Audit Committees, EXCO, and senior leadership on internal controls and SOX compliance.
Experience in the financial services, fintech, or payments sector is advantageous.
Prior exposure to JSE Listings Requirements and dual‐listed entity governance is beneficial.
Qualifications And Skills CA(SA) – Chartered Accountant (South Africa) – advantageous.
CIA (Certified Internal Auditor) – advantageous.
CPA (Certified Public Accountant) or equivalent international designation – advantageous.
CISA (Certified Information Systems Auditor) – beneficial for candidates with significant ITGC exposure.
BCom Accounting, Internal Auditing, or equivalent degree – minimum requirement where a professional designation is not held.
Expert‐level knowledge of the Sarbanes‐Oxley Act (Sections 302 and 404), COSO framework, and PCAOB standards.
Strong understanding of financial reporting processes, general ledger structures, and IFRS accounting standards.
Proficiency in GRC tools (e.g., AuditBoard, Workiva, SAP GRC, or similar) and advanced Excel skills.
Excellent report writing, presentation, and stakeholder communication skills.
Strong analytical and risk assessment capabilities with the ability to exercise sound professional judgement.
Work Behaviours And Attributes Technically credible and confident – recognised as a subject‐matter expert in SOX and internal controls.
Strong leadership presence with the ability to influence, challenge, and engage stakeholders at all levels, including EXCO and the Audit Committee.
Highly organised and structured, with the ability to manage a complex, multi‐stakeholder compliance programme to strict regulatory deadlines.
Independent thinker with the ability to exercise sound professional judgement and elevate concerns when appropriate.
Proactive and commercially aware – balances control rigour with pragmatic, business‐enabling solutions.
High level of integrity, objectivity, and ethical conduct – essential given the nature of the role in a listed company environment.
Collaborative and cross‐functional by nature; builds trust and productive relationships across finance, IT, operations, and audit.
Resilient and composed under pressure, particularly during peak audit and reporting cycles.
#J-*****-Ljbffr