Product Auditor

Moniepoint Incorporated is a global business payments and banking platform and recently became QED Investors’ first investment in Africa. We are the partner of choice for over 600,000 businesses of all sizes, powering the dreams of SMBs and providing them with equal access to the tools they need to grow and scale. We are recruiting to fill the position below:

Job Title: Product Auditor

Location: Lagos (Remote) Role Overview The Product Auditor provides independent assurance over the design, implementation, and operating effectiveness of product controls across payment, wallet, settlement, switches and other related products across the organisation The role ensures that new and existing products are deployed with adequate financial, operational, security, and regulatory controls, safeguarding the organization against revenue leakage, settlement failures, regulatory breaches, and technology-driven risks. The Product Auditor will independently evaluate product risk exposure and control maturity prior to scale.

Key Responsibilities

Audit Universe & Risk-Based Planning: Maintain a living Product Audit Universe covering all payment products, features, and integrations ranked by risk. Own the annual Product Audit Plan, ensuring coverage is allocated dynamically based on risk ratings, product complexity, regulatory sensitivity, and change velocity. Product Design & Control Assurance: Review PRDs, business rules, and transaction workflows to identify logic gaps, unmitigated risk paths, and missing exception-handling routines before products reach production/go-live. Analyse product path scenarios, verify Maker-Checker enforcement, and provide formal control design sign-off before any material release goes live. Live Product Assessment ( Continuous Audit Review): Periodically assess live payment products to confirm they continue to operate within approved design parameters. Detect configuration drift, identify silent divergence from original PRDs, and analyse live transaction data for emerging risk patterns. Go-Live Readiness & Control Gate: Execute mandatory pre-production Product Audit reviews as an independent control gate for all material releases. Confirm reconciliation logic, exception queues, and fallback controls are tested and functional. Escalate critical deficiencies with risk ratings and hold recommendations where a product is not safe to release. Transaction Logic & Mathematical Integrity: Interrogate the Fee Engine using SQL to mathematically prove that commissions, VAT, discounts, and splits are posted with complete precision. Validate duplicate prevention mechanisms and ensure transaction integrity within complex, multi-step payment sequences, and test reversal, refund, and chargeback logic to confirm financial symmetry is maintained in every scenario. Settlement & Ledger Integrity: Trace fund flows, confirming continuous synchronisation between wallet sub-ledgers and the General Ledger. Assess reconciliation logic for breaks and evaluate the authorisation, documentation, and reversibility of manual settlement overrides. Product Change & Configuration Integrity Confirm that all product modifications: fee tables, routing rules, limit parameters passed through an approved change management cycle. Identify silent changes made outside formal release processes and audit the integrity of product master data to ensure it is access-controlled, version-tracked, and consistent with approved product terms. Vendor & Third-Party Product Risk Assess controls over vendor-managed product components, evaluate SLA performance against contractual commitments, and identify single-vendor dependency risks within critical payment flows. Evaluate the organisation's ability to detect unilateral changes in third-party API behaviour, fee logic, or settlement processes. Control Advisory & Stakeholder Engagement Engage product and engineering teams early in the design cycle to provide informal control advisory, reducing findings at the formal review stage without compromising independence. Participate in design reviews and architecture discussions, and build a control-by-design culture across product teams. Incident Review, RCA & Regulatory Alignment Lead post-incident reviews for product failures,producing structured RCA reports that identify underlying logic failures, not just surface symptoms. Assess corrective actions for adequacy and track findings to verify closure. Ensure product logic complies with CBN guidelines, PCI DSS, and consumer protection obligations at the design level, and evaluate the regulatory impact of new features before release. Reporting & Governance Prepare risk-rated audit reports for Executive Management and the Audit Committee, leading with findings, financial impact, and required action. Maintain a Product Risk Register, deliver quarterly control maturity updates, and ensure governance bodies are never surprised by a product failure that was visible at the design or portfolio review stage.