Product Auditor

Job description

About this role

The Product Auditor provides independent assurance over the design, implementation, and operating effectiveness of product controls across payment, wallet, settlement, switches and other related products across the organisation The role ensures that new and existing products are deployed with adequate financial, operational, security, and regulatory controls, safeguarding the organization against revenue leakage, settlement failures, regulatory breaches, and technology-driven risks. The Product Auditor will independently evaluate product risk exposure and control maturity prior to scale.

Responsibilities

• Maintain a living Product Audit Universe covering all payment products, features, and integrations ranked by risk.
• Own the annual Product Audit Plan, ensuring coverage is allocated dynamically based on risk ratings, product complexity, regulatory sensitivity, and change velocity.
• Review PRDs, business rules, and transaction workflows to identify logic gaps, unmitigated risk paths, and missing exception-handling routines before products reach production/go-live.
• Analyse product path scenarios, verify Maker-Checker enforcement, and provide formal control design sign-off before any material release goes live.
• Live Product Assessment ( Continuous Audit Review)
• Periodically assess live payment products to confirm they continue to operate within approved design parameters.
• Detect configuration drift, identify silent divergence from original PRDs, and analyse live transaction data for emerging risk patterns.
• Execute mandatory pre-production Product Audit reviews as an independent control gate for all material releases.
• Confirm reconciliation logic, exception queues, and fallback controls are tested and functional.
• Escalate critical deficiencies with risk ratings and hold recommendations where a product is not safe to release.
• Interrogate the Fee Engine using SQL to mathematically prove that commissions, VAT, discounts, and splits are posted with complete precision.

Qualifications and requirements

• Advanced SQL for independent data extraction and transaction interrogation
• Payment systems architecture : Wallets, card processing, direct debit, settlement, and reconciliation
• API and integration literacy (Basic)
• End-to-end transaction lifecycle knowledge: Authorisation, posting, clearing, settlement, and exception handling
• PRD and process flow analysis: translating product documentation into control flowcharts
• Mathematical precision: fee calculations, interest computations, and split payment structures
• Pattern recognition: detecting anomalies, outliers, and irregularities in large transaction datasets
• Risk-based audit methodology: IIA Standards and COSO framework applied to financial products.
• Control design logic and evaluation
• Root cause analysis
• Regulatory knowledge: CBN payment system regulations, PCI DSS, NDPR,Nigerian consumer protection obligations etc
• Professional scepticism and independence