How you'll help us achieve it

We are seeking an IT Internal Control Officer to join Wave’s Internal Control team to assist in identifying our exposure to diverse risk categories and implementing robust risk mitigation mechanisms. In this role, you will collaborate closely with cross-functional teams across the organization to execute specific controls and effectively escalate emerging risks.

Candidates should demonstrate a growth mindset and the humility required for continuous professional development. You will be responsible for enabling Wave to take calculated risks, defining, deploying, and monitoring a comprehensive risk management system, and proposing optimized process solutions to support leadership in strategic decision-making as we rapidly scale our operations.

In this role, you'll:

• Be the primary external point of contact on IT and security controls at Wave for the BCEAO, banking partners, or any IT and security control audits conducted in Senegal and Côte d’Ivoire. You will collaborate closely with Wave’s Security Team as a strategic partner.
• Support the execution of IT audits and subsequent follow-ups, including drafting requested reports.
• Manage audit remediations specific to the IT and Security scope.
• Assist in identifying and controlling risks across the organization, occasionally extending beyond IT.
• Ensure IT risks are identified within Wave’s risk mapping framework ahead of product or process launches (noting that Product/Engineering owns the initial risk identification).
• Implement risk management policies, particularly those related to IT.
• Perform periodic reporting on risk management activities.
• Conduct preventive and detective controls aligned with our risk profile.
• Monitor internal mechanisms to report, investigate, and escalate risk issues.
• Anticipate shifts in risk trends and evaluate their potential impact on the organization.
• Execute other duties as assigned to meet evolving business requirements.

Key details

• Location: You will be based in our office in Côte d’Ivoire, with potential travel to field locations.
• Work authorization in Côte d’Ivoire is required.
• Our compensation packages are competitive and calculated using a transparent formula. We conduct biannual performance reviews and award bonuses to strong performers who have been with the company for over six months.
• We cover 90% of healthcare insurance premium costs for you and your dependents.
• We support working parents by offering generous parental leave policies (26 weeks for mothers and 4 weeks for fathers) alongside subsidized childcare upon your return to work.
• We help you prioritize your well-being by subsidizing gym memberships, fitness classes, and workout equipment.
• Airtime reimbursement is provided.
• Enjoy complimentary meals and a premium office space.

Requirements

• 3–5 years of experience in internal control (risk management, permanent control, or internal audit) and/or IT and security controls/audits.
• A university degree in IT or a comparable field.
• Familiarity with at least one major IT security or control framework, such as ISO 27001, COBIT, NIST, or SOC 2. Certification is not required, but you should understand how these frameworks structure IT risks and controls, and be able to apply them practically when designing or assessing controls.
• Solid understanding of IT General Controls (ITGCs) and cloud-native, cloud-hosted platforms.
• Exceptional analytical skills and a strong aptitude for in-depth technical investigation.
• Professional fluency in both French and English.
• Results-driven with a proactive, "get it done" mindset.
• High emotional and cultural intelligence.
• Strong written and verbal communication and presentation skills, including the ability to influence a diverse range of stakeholders at all leadership levels.
• Prior experience in Mobile Money or the financial sector will be considered a distinct advantage.
• Knowledge of fraud prevention and/or compliance frameworks is a plus.
• Experience working within an international company or in a global context is preferred.

You might be a good fit if you

• Have a proven track record of successfully collaborating and partnering with cross-functional teams.
• Possess a strong ability to manage multiple tasks and meet tight deadlines in a rapidly changing environment.
• Function effectively under pressure and within high-stress environments.
• Are intellectually curious, creative in your approach to problem-solving, and view failure as an opportunity for innovation and growth.
• Love owning projects from end to end—acting autonomously while knowing precisely when to escalate complex issues.
• Are comfortable defaulting to proactive communication and extended coordination across teams.
• Know how to maintain strict confidentiality when handling sensitive information.
• Adjust seamlessly to shifting priorities and conditions while managing time constraints effectively.
• Can translate complex IT findings into clear, actionable insights for non-technical stakeholders, including senior management and regulatory bodies.
• Are comfortable operating in a fast-paced environment where processes are still maturing—viewing operational gaps as opportunities rather than blockers.
• Maintain a structured, evidence-based approach to control testing, meticulously documenting your work to leave a clean audit trail.