Internal Controller

About the role

Join Alan's Corporate team as an Internal Controller to develop, implement, and oversee control systems that ensure the company's operations are conducted safely, responsibly, and in compliance with regulatory standards at scale. This role involves designing and maintaining control frameworks with a strong emphasis on leveraging automation and AI technologies to enable early risk detection and mitigation. You will be instrumental in building a new generation of risk professionals within the organization, acting as a strategic business partner who collaborates closely with various teams rather than simply checking boxes for compliance. Your work will contribute to creating a resilient operational environment that supports Alan's growth and innovation while maintaining rigorous control standards.

Key facts

What you'll do

• Design, develop, and implement comprehensive control frameworks tailored to different business processes, ensuring they are reliable, scalable, and adaptable through the integration of AI and automation tools.
• Continuously improve systems for identifying, assessing, and tracking risks across the organization, contributing to the development of innovative risk management tools that emerging technologies.
• Conduct secondary reviews and deep-dive assessments in high-risk areas to verify the effectiveness of existing controls and identify potential gaps.
• Lead efforts to ensure that control documentation is accurate, up-to-date, and easily accessible, facilitating sharing with external partners, auditors, and regulatory bodies.
• Support the management and coordination of audits conducted by commercial partners and regulatory agencies, ensuring compliance and readiness at all times.
• Promote and embed risk management best practices throughout the company by working closely with teams such as Insurance, Operations, Security, and Legal, helping them develop and implement effective risk mitigation strategies.
• Develop educational resources, training programs, and communication materials to empower teams with knowledge on internal controls, risk management, and regulatory compliance, fostering a culture of proactive risk awareness.
• Collaborate with product, engineering, and operational teams to identify control issues, design solutions, and implement automated controls that enhance operational efficiency and reduce manual effort.
• Assist in the recruitment, onboarding, and development of new team members to ensure the control function remains and capable of supporting the company's growth.
• Stay informed about evolving regulations, industry standards, and technological advancements related to risk and control management, ensuring the company remains compliant and at the forefront of best practices.
• Act as a trusted business partner, providing guidance and insights to various departments on control-related matters, and helping them integrate risk considerations into their strategic planning and day-to-day operations.

Requirements

• A minimum of two years' experience in internal control, risk management, or a related function within insurance, a Big Four accounting or consulting firm, or a fast-growing, regulated environment.
• Proven track record of designing and implementing control frameworks, preferably in environments subject to regulatory oversight such as Solvency II.
• Fluency in both French and English, with excellent communication skills to articulate complex control and risk concepts clearly.
• Strong knowledge of Solvency II regulations and familiarity with specific domain expertise such as insurance operations, reserving, underwriting, or reporting processes.
• Experience working with AI and automation tools, with an understanding of how these technologies can be used to scale controls and improve risk detection.
• Ability to anticipate the impact of AI and automation on control processes and to develop innovative solutions that these technologies effectively.
• A proactive, solutions-oriented mindset focused on building new processes and tools rather than solely following existing procedures.
• Demonstrated ability to work collaboratively with cross-functional teams, including product, engineering, legal, and compliance, to address control and risk issues.
• A structured, precise working style that is comfortable with asynchronous communication and remote collaboration.
• Legally eligible to work in France, with the necessary work authorization or residency status.

Nice to have

• Experience working across multiple jurisdictions such as France, Belgium, Spain, or Canada, especially with regulatory frameworks like OSFI.
• Familiarity with the DORA (Digital Operational Resilience Act) framework and its implications for operational resilience and risk management.
• Exposure to standards such as HDS (Health Data Hosting) and ISO 27001, indicating familiarity with information security and data protection standards.
• Knowledge of additional regulatory or industry standards relevant to insurance and financial services.
• Previous experience in implementing or managing control frameworks in international or multi-jurisdictional environments.
• Understanding of emerging trends in AI, automation, and digital transformation within risk and control functions.

Skills & tools

• Deep understanding of Solvency II regulations and requirements.
• Experience with AI and automation tools used for control and risk management purposes.
• Strong analytical skills to assess control effectiveness and identify improvement opportunities.
• Excellent communication skills to articulate complex concepts to diverse audiences.
• Ability to develop and maintain detailed documentation and control procedures.
• Familiarity with audit processes and regulatory reporting requirements.

Practical notes

Alan offers flexible remote working arrangements but values in-person collaboration at the Paris office. While the role is primarily based in Paris, candidates must be legally eligible to work in France, including holding appropriate work authorization or residency status. The company encourages a culture of continuous learning and innovation, supporting employees in developing their skills in risk management, automation, and compliance. The position involves working closely with various teams across the organization to embed control practices into daily operations and strategic initiatives. The company emphasizes a proactive approach to risk, leveraging technology to stay ahead of emerging threats and regulatory changes.