Senior Internal Control and Assurance Lead

CEPI is an innovative partnership between public, private, philanthropic and civil organisations. Its mission is to accelerate the development of vaccines and other biologic countermeasures against epidemic and pandemic threats so they can be accessible to all people in need. CEPI’s work has delivered world firsts for vaccines against many of its priority pathogens including the first licensed Chikungunya vaccine, the first ever Lassa fever, Nipah and MERS vaccines to reach Phase II trials and the first Rift Valley fever vaccine candidate to be studied in Phase II in an endemic region. CEPI has also supported programmes to generate much-needed data to expand access to Ebola and Mpox vaccines. CEPI was among the first funders of COVID-19 vaccines, ultimately building one of the world’s largest portfolios, seven of which were licensed. The Coalition also conceptualised and co-founded COVAX, which delivered nearly two billion doses of COVID-19 vaccines to 146 countries, saving an estimated 2.7 million lives in lower-income regions. Central to CEPI’s pandemic‑beating plan is the ‘100 Days Mission’ – its goal to develop safe, effective and accessible vaccines against new threats in just 100 days. CEPI is seeking funding to execute CEPI 3.0, its 2027‑2031 strategy, which will systematically reduce the likelihood and impact of epidemics and pandemics by driving the 100 Days Mission towards an operational reality. CEPI is a not‑for‑profit association under Norwegian Law and has offices in Oslo (HQ), London, and Washington DC. In CEPI we strive for diverse thinking, and we want a diverse pool of candidates for all our vacancies. We work for an inclusive working environment where each employee can contribute and grow.

About the role

The Senior Control and Assurance Lead will report to the Head of Risk, Assurance and Resilience in CEPI’s Compliance, Risk and Assurance Department, and will work closely with leaders across CEPI to provide expert advice and support on internal controls and assurance. This role plays a critical part in enabling CEPI to deliver on its mission by ensuring that robust internal controls are in place and that CEPI’s awardees and partners are held to high standards of accountability and performance. The role oversees the implementation and continuous improvement of CEPI’s internal control framework and leads the planning, execution, and reporting of CEPI’s partner assurance programme. It also supports the coordination of CEPI’s outsourced internal audit function.

The ideal candidate will bring deep expertise in audit & assurance, and internal controls, with a strong understanding of how these disciplines contribute to organizational effectiveness and risk mitigation in a complex matrixed, partner‑driven environment. The role requires excellent communication and organizational skills, sound judgment, and the ability to work both independently and collaboratively in a fast‑paced, mission‑driven setting. The ideal candidate is expected to uphold the highest standards of integrity, confidentiality, and professionalism in all aspects of the role. This is a full time position for 1 year.

Responsibilities

• Partner Assurance
  • Lead the design and implementation of CEPI’s partner assurance framework.
  • Lead annual audit planning, oversight, and reporting of audits conducted on CEPI awardees and partners, ensuring alignment with CEPI’s strategic objectives and risk appetite.
  • Where needed lead partner assurance audit (on site or remote).
  • Monitor audit deliverables and ensure timely resolution of findings and recommendations.
  • Contribute to annual planning and budgeting for assurance and control activities, ensuring efficient use of resources.
• Internal Controls
  • Lead the development, implementation and continuous improvement of CEPI’s internal control framework, ensuring it supports operational efficiency, compliance, and strategic delivery.
  • Contribute to ongoing risk assessments, control self‑assessments (CSA) as appropriate and applicable.
• Reporting and analysis
  • Prepare concise assurance and control reports to CEPI leadership, the Audit and Risk Committee, and other governance bodies as required.
  • Develop and maintain policies, procedures, and tools for partner assurance and internal controls, tailored to CEPI’s operating model and risk profile.
• Collaboration and Continuous Improvement
  • Partner with CEPI Divisions and provide expert advice to CEPI leadership and teams on partner assurance and internal control matters, fostering a culture of accountability and continuous improvement.
  • Manage relationships with third‑party service providers, ensuring performance against agreed SLAs and KPIs.
  • Support the coordination and oversight of CEPI’s outsourced internal audit provider, ensuring quality and relevance of audit activities.
  • Design and deliver training and awareness programmes to build internal capacity and understanding of assurance and control principles.
  • Contribute to the culture of integrity, transparency and accountability within the organisation.

Education, Experience and Competence

• Essential: Bachelor’s degree or equivalent in Business Administration, Finance, Audit, Risk Management, or a related field.
• Essential: Minimum 7‑10 years’ experience in assurance or internal control roles.
• Preferred: Advanced training or certification in audit, assurance, risk management or internal controls.
• Essential: Experience managing outsourced audit providers.
• High degree of integrity and confidentiality - and proactive, adaptable, and accountable for delivery in a dynamic environment.
• Extensive experience in assurance and internal control roles, ideally within international organizations or global health/life sciences sectors.
• Proven track record of development and oversight of internal control frameworks, risk‑based assurance approaches, and regulatory compliance.
• Strong understanding of internal control principles and best practices, risk management methodologies, and process documentation practices.
• Robust stakeholder engagement skills, with the ability to effectively communicate and engage with stakeholders internally and externally.
• Problem‑solving ability, creative and strategic thinker with the capability to troubleshoot issues, develop effective solutions, and adapt to evolving challenges.
• Experience managing outsourced audit providers and coordinating complex audit programmes.
• Excellent analytical and communication skills, with the ability to interpret and convey complex findings to diverse audiences.
• Strong project management skills, with the ability to plan, prioritize, and deliver in a dynamic environment.
• Strong proficiency in data visualization and reporting tools and analytics platforms, and experience with enterprise software solutions and digital tools that support risk and control processes.
• Proven ability to work collaboratively across functions and cultures, with a proactive and adaptable mindset.

Travel and Location Requirements

Position based in either London, UK, or Oslo, Norway. Some travel may be required, occasionally at short notice.

What we can offer you

The opportunity to work together with leading experts on solutions for global challenges. Experience in the international effort on developing vaccines against emerging infectious diseases and accelerating vaccine development response to outbreaks. A diverse and inclusive working environment.

How to apply

For more information on how to apply, please visit: https://cepisites.secure.force.com/careers. Should you have any issues submitting your application or have questions please contact jobs@cepi.net. Background verification will be conducted to verify information provided in the CV and available documentation. Deadline for receiving applications is 24th March 2026 at 23:59 CET.