Job Summary
The Internal Control Officer is responsible for evaluating, monitoring, and strengthening internal control systems across the Group’s operating entities, including Hospitals, HMO, Diagnostics, and Health Technology. The role focuses on identifying operational and financial leakages, assessing compliance with established policies and processes, reviewing the integrity of financial and operational data, and ensuring effective controls across business operations. The incumbent will support risk management, conduct control reviews, track identified exceptions, and provide clear findings and recommendations to strengthen operational efficiency, compliance, and accountability across the Group.
Primary Responsibilities
Group & Operating Entity Internal Control
-
Conduct risk-based internal control reviews across holding company subsidiaries (Hospital, HMO, Diagnostics, and Health Tech) to evaluate compliance with established policies, authority limits, and standard operating procedures (SOPs).
-
Map existing processes across all operating entities to identify control gaps, operational bottlenecks, and financial exposure areas.
-
Maintain a central Exception Tracker, follow up with business unit heads to ensure prompt remediation of control deficiencies, and conduct periodic verification reviews, and timelines.
-
Verify that GL postings comply with established approval limits, chart of accounts guidelines, proper supporting documentation, and correct tax or statutory treatments.
Hospital & Diagnostic Operations Control
-
Review inventory management processes, stock reconciliations, and drug/reagent usage across hospital branches and diagnostic labs to prevent theft, waste, and expiration losses.
- Audit billing, payment collection, deposit posting, and credit management workflows within hospitals and labs to eliminate revenue leakage.
-
Verify asset utilization, maintenance logs, and procurement controls for high-value medical and diagnostic equipment.
HMO Operations & Claims Control
-
Perform periodic reviews of HMO claims validation, provider billing, and tariff compliance to prevent overbilling, unauthorized services, and duplicate claims.
- Review provider reconciliations and payment schedules against agreed tariffs and capitation agreements to identify financial leakages.
-
Assess Fraud, Waste, and Abuse (FWA) detection mechanisms within HMO claims processing and report red flags.
Health Technology & Systems Review
-
Evaluate application controls, user access permissions, audit trails, and data integrity within core systems (EMR, Claims Management Systems, ERP/Odoo, and Health Tech platforms)
-
Review change management procedures, system integration controls, and data security protocols across health technology products
Financial & Administrative Control
-
Review vendor payments and administrative expenditure across entities to ensure proper documentation, approval compliance, and budget alignment.
- Conduct spot checks on inventory counts and fixed asset registers across operating sites.
-
Assist in special investigations into suspected fraud, irregularities, or compliance with breaches across the Group.
Qualifications
-
Bachelor’s degree in accounting, Finance, Economics, Insurance, Information Technology, or a related field
-
Professional Certification: Professional certification such as ACA, ACCA, CISA, CIA, or CFE is strongly preferred.
-
3 – 5 years of progressive experience in internal control or internal audit – preferably within healthcare, HMO, pharmaceuticals, financial services, or health tech sectors.
Key Skills & Competencies
- Cross-Sector Knowledge: Strong understanding of internal control frameworks (e.g., COSO), healthcare operations, HMO claims validation, and inventory control systems.
- Systems Proficiency: Hands-on experience auditing EMRs, ERP systems (e.g., Odoo, SAP), or health-tech platforms. Advanced data analysis skills in Microsoft Excel or Power BI are highly advantageous.
- Analytical & Forensic Mindset: High capacity to review large volumes of operational and financial data, identify anomalies, and uncover root causes of leakages.
- Communication & Stakeholder Management: Excellent written and verbal communication skills, with the ability to present clear findings and partner constructively with business leads.
-
Integrity & Objectivity: Uncompromising ethical standards, discretion, and objectivity.
To apply for this job email your details to hr@afya.care