Internal

Role Profile

Job Title Corporate Governance – Finance Controls Advisor

Responsible to Corporate Governance Manager

Location Office Based (Hybrid 3:2)

Department Central Finance, Profit Protection, Risk & Control & Governance

Hay Grade D

This role profile is a guide to the work you will initially be required to undertake. It may be changed from time to time to incorporate

changing circumstances. It does not form part of your contract of employment.

Overall Purpose of the Role: To support the Corporate Governance Manager in strengthening and overseeing the finance control environment across UK & Ireland. The role will support the design, embedding, monitoring and assessment of the effectiveness of material financial controls aligned to Principal Risks disclosed in the Annual Report and Accounts, including those supporting key financial reporting processes (for example, order to cash, procure to pay, payroll, treasury and record to report).

Working in partnership with Finance leadership, process owners and shared service teams, the role will ensure controls are cl early owned, consistently operated, appropriately evidenced and subject to robust escalation where deficiencies arise. Governance standards will align with UK Corporate Governance Code Provision 29 and the broader SOX readiness roadmap.

The role reports into Corporate Governance. Ultimate control ownership remains with Finance leadership and relevant process owners.

Key Accountabilities Compliance - Finance Controls Governance

KPIs/Measures

• Ensure governance activity supports accurate, complete and timely financial reporting.

• Promote adherence to finance policies, controls standards and key regulatory obligations impacting financial reporting.

• Monthly finance control submissions completed within

agreed timetable • Actions tracked with clear ownership and due dates

• No overdue remediation beyond agreed tolerance

• Material finance control issues escalated in a timely

manner • Reduction in repeat control deficiencies

Relationship Management KPIs/Measures

• Build and maintain strong working relationships with Finance

leadership, process owners and shared service teams. • Provide constructive challenge where finance control standards

are not achieved. • Support education and awareness of finance control and SOX

readiness requirements across the business.

• Active participation in cross domain governance

forums • Positive feedback from Finance and Corporate

Governance stakeholders • Change actions implemented within agreed timelines

• Consistent documentation standards across domains

Internal

Finance Controls Programme

KPIs/Measures

• Design and maintain a documented framework of key finance controls across material financial reporting processes and key systems (including manual and automated controls).

• Develop and formalise finance control standards, minimum evidence requirements and documentation expectations to

support Provision 29 compliance and future SOX readiness. • Ensure controls are clearly owned, consistently operated and

appropriately evidenced across key processes including revenue, accounts receivable, accounts payable, payroll, fixed assets, inventory, treasury and financial close.

• Document control narratives, process flows and Risk and

Control Matrices to enhance clarity of design, accountability and audit readiness.

• Support implementation and governance of key preventative controls such as approvals, segregation of duties, reconciliations, management reviews and monitoring controls.

• Review periodic finance control submissions, assess compliance against agreed standards and track remediation actions to

completion.

• 100 percent of material finance controls formally documented and assigned to accountable owners

• Core finance policies and control documentation

maintained and subject to periodic review • Control execution and evidence submission completed

within agreed timetable • Key reconciliations completed and reviewed in line with

policy and close timetable

• Reduction in repeat control deficiencies across audit cycles

• Clear audit trail maintained for all material finance controls

Governance Monitoring & Reporting KPIs/Measures

• Develop and maintain monthly finance controls dashboards for review with Finance stakeholders.

• Lead structured monthly finance control review meetings with documented actions.

• Identify recurring themes and emerging finance risks, escalating

where appropriate.

• Finance controls dashboard submitted in line with agreed timetable and reporting standards set by the Corporate Governance Manager

• All actions logged with owner and due date • No action overdue beyond tolerance without escalation

• Accurate and complete input into Corporate Governance dashboard

• Thematic trends identified and escalated appropriately

Control Assurance and Effectiveness KPIs/Measures • Assess control effectiveness across finance control domains,

including manual and automated controls supporting financial reporting.

• Escalate material finance control deficiencies to the Corporate Governance Manager, with appropriate visibility to Finance leadership.

• Support Internal Audit and external assurance activity where required.

• Drive continuous improvement through automation, analytics and improved reporting.

• Material deficiencies escalated within agreed timeframe

• Root cause analysis completed for significant failures

• Remediation plans agreed within defined timeframe • Demonstrable improvement in finance control maturity

year on year

Audit & Assurance Oversight KPIs/Measures • Support the Corporate Governance Manager in acting as

primary governance liaison for Internal Audit reviews relating to

finance controls and ICFR / SOX readiness. • Coordinate control walkthroughs, evidence collation and

management responses as delegated, ensuring adherence to agreed timelines

• Review draft audit findings and management responses to

ensure root cause analysis is robust and remediation actions are proportionate

• Work with finance control owners and process owners to agree remediation actions, clear accountability and target dates

• Monitor progress of audit actions and escalate overdue or high-

risk items to the Corporate Governance Manager in accordance with governance framework

• Maintain an accurate central log of audit recommendations and status updates for reporting

• Support preparation for external audit or Provision 29 and

future SOX assurance reviews as required • Identify recurring themes from audit findings and propose

preventative improvements to strengthen control maturity

• 100 percent of Internal Audit actions tracked with no overdue items beyond agreed tolerance

• Audit evidence coordinated and provided within agreed timetable and meeting quality standards

• All significant findings supported by documented root

cause analysis and agreed remediation plan within defined timeframe

• Reduction in repeat findings across consecutive audit cycles through preventative action

• Clear monthly audit status reporting provided to Corporate Governance Manager

Internal

Person Specification

Leadership behaviours:

Can Do - Demonstrates resilience, sound judgement and the confidence to challenge appropriately.

Share Success – Supports stakeholders to understand control expectations and builds capability.

Passion for Quality - Maintains high standards of governance and follows through on actions.

Win through Teamwork – Builds collaborative relationships across Legal, Finance and Operations.

Embrace Diversity – Acts with integrity and promotes an inclusive compliance culture.

Essential • Professional qualification (e.g., ACA/ACCA/CIMA) or equivalent experience in finance controls, financial risk, audit or governance

• Knowledge of ERP environments (e.g., SAP) and the interaction between finance processes and systems • Experience within internal control frameworks such as SOX, ICFR or UK Corporate Governance Code Provision 29

• Experience documenting processes and controls (process narratives, flowcharts, Risk and Control Matrices) and assessing desig n and operating effectiveness

• Experience embedding and operating controls within operational or decentralised environments

• Strong stakeholder management and communication skills with the ability to provide constructive challenge • Ability to assess materiality and exercise balanced escalation judgement

• Strong analytical capability with attention to detail

• Proficient IT skills including Excel and reporting tools, with the ability to leverage automation and AI tools to improve eff iciency

Desirable • Experience working with AI Tools in particular. Copilot / ChatGPT

• Flowcharting - Visio

Key Contacts and Working Relationships • Corporate Governance Manager

• Finance Director / CFO and Finance Leadership Team

• Financial Reporting teams • Shared Services (e.g., Accounts Payable, Accounts Receivable, Payroll)

• Business process owners across Operations, Commercial and Supply Chain (for in-scope financial processes)

• ERP and Finance Systems teams (for controls enabled by systems and automation) • Corporate Governance peers across IT, Compliance and ESG

• Group Internal Audit

• External Audit and other assurance providers as required

• Risk and Compliance functions

Dimensions • Finance and financial reporting Principal Risks (including risk of material misstatement) • UK & Ireland operations

• Revenue £5+ billion

• Multi-site operational environment

Colleague Confirmation

Please sign and print name below to confirm receipt of your job description

Colleague Signature: _____________________________________________

Print Name: ____________________________________________________ Date: _________________________________________________________

CONFIDENTIAL

Job Title Group Internal Controls Manager Location Chertsey Head Office Reporting to Head of Financial & ESG Controls

Role Overview The Group Internal Controls Manager plays an important role in supporting the design, implementation and embedding of a robust SOX-like internal controls over financial reporting (ICFR) across Compass Group. Compass Group aims to operate a robust UK Corporate Governance Code control environment and as part of this seeks to achieve control standards aligned with US SOX over its ICFR. This role will be at the forefront of this ambition, supporting the evolution of the Group’s ICFR framework in a proportionate and scalable way. The successful candidate will bring recent, hands-on experience implementing, operating and/or auditing strong (including SOX) frameworks, and will apply this expertise to help elevate the Group’s internal control maturity across a large, decentralised global organisation. Operating as part of the Group Second Line of Defence, the role partners closely with countries, head office functions, Internal Audit and External Audit to ensure controls are appropriately designed, documented, tested, remediated and governed in line with UK Governance Code, SOX and ICFR expectations. Key Responsibilities ICFR Framework enhancement • Support the implementation and enhancement of financial controls to align with a SOX-style

ICFR framework across Compass Group. • Support the design of risk assessments, scoping methodologies, materiality thresholds and

control rationalisation. • Support the development and maintenance of Risk and Control Matrices (RACMs) aligned to

best practice (SOX standards). • Drive consistent application of best practice concepts such as key controls, Information

Produced by the Entity (IPE), IT-dependent controls, entity-level controls and management review controls (MRC).

• Document end-to-end process flows to support risk identification, control design, testing and audit requirements

Embedding Controls • Work hands-on with countries and head office functions to understand processes, facilitate

standardisation, and embed best practice (SOX style) controls into end-to-end financial processes.

• Provide expert challenge and guidance to process and control owners on design, documentation and evidence standards.

• Translate technical requirements into clear, practical guidance suitable for a decentralised operating model.

CONFIDENTIAL

• Build strong control capability across the business through training, coaching, sharing of best practice and knowledge sharing.

Testing, Deficiencies & Remediation • Perform testing of design and operating effectiveness of key controls. • Review testing performed by the business, ensuring alignment with best practice including

SOX methodology. • Assess deficiencies including severity evaluation (deficiency, significant deficiency, material

weakness). • Perform root cause analysis and support the design of robust remediation plans. • Track remediation progress and ensure timely and sustainable closure of control issues.

Audit & Governance • Act as a key UK Governance Code, SOX and ICFR liaison with internal audit and external

audit. • Contribute to bi-annual controls compliance reporting & review. • Support governance and controls reporting to key stakeholders.

Skills & experience • Recent, hands-on experience implementing, operating and/or auditing SOX 404 internal

controls. • Strong working knowledge of UK Governance Code and SOX methodologies including

scoping, risk assessment, key control identification, IPE, sampling, testing and remediation. • Experience working with external auditors on controls audits or readiness programmes. • Strong understanding of core financial processes (Record to Report, Order to Cash, Procure

to Pay, Hire to Retire). • Strong stakeholder management skills with the ability to influence and challenge

stakeholders. • Pragmatic mindset with the ability to apply rigour proportionately. • Professionally qualified accountant (ACA, ACCA, CIMA or equivalent). • Background in SOX compliance, Internal Audit, External Audit or Risk Assurance.

What This Role Offers • Opportunity to support the enhancement of a robust UK Corporate Governance Code

control environment to achieve control standards aligned with US SOX in a FTSE 20 global organisation.

• High visibility with senior stakeholders. • Ability to help shape the Group’s ICFR framework and long-term SOX roadmap. • International exposure and strong professional development opportunities.