Brighton Dube

Accomplished Head of GRC and seasoned Chief Risk Officer with 18 years of combined experience in internal audit and enterprise risk management. Proven track record implementing COSO ERM frameworks, GRC automation, business continuity plans, and compliance programs across complex, multi-unit organisations. Brings strategic insight, executive-level communication, and hands-on leadership to drive robust governance and sustainable risk culture.

Head of Governance, Internal Audit, Risk & Compliance at Fidelity Services Group (2025-09 – Present)

• Board-level oversight and reporting across Governance, Risk, Internal Audit, Investigations and Compliance functions
• Oversee Quality Assurance mandate and lead a team of 28 professionals
• Drive strategic alignment of all assurance functions to organisational objectives
• Implementation of the Risk Management program – COSO ERM – SOC1 and SOC 2 _ISAE3402 compliance
• Automating Risk Management – Implemented and imbedded the GRC tool
• Coordination of business units (Cash In transit, ADT, guarding services etc.) and creating synergies in managing risks between the business units
• Ensuring there is a comprehensive risk universe
• Risk Assessments- facilitation of annual control self-assessments and workshops
• Risk Mitigation
• Risk Monitoring
• Monitoring of Risk Emanating from Audit Findings
• Chairing of the monthly combined assurance committee- ensuring the success of the assurance model
• Quarterly reporting to the Risk Committee
• Planning and implementation of the annual Risk workshop
• Coordination of the Combined Assurance Committee
• Implementing SOX compliance
• Monitoring of the Compliance program to laws and regulations as well as Business processes – FICA, POPIA, Firearms Act, MFMA, PFMA etc.
• Implementation of the Anit Money laundering program
• Implementation and Audit of Quality Standard ISO -9001, 45001, 27001, and other
• Policy Development and implementation
• ESG implementation
• BIA Assessments
• Facilitation of Group ISO Certification
• IT Risk management, facilitation of IT related risk (Cyber security, COBIT)
• Implementation of ISAE3402 Methodology
• Annual Integrated reporting
• Business Continuity

Group Chief Risk Officer at Fidelity Services Group (2021-11 – 2025-08)

• Implemented COSO ERM framework achieving SOC 1, SOC 2, and ISAE 3402 compliance
• Led end-to-end GRC tool implementation (Exclaim), automating risk management across the group
• Chaired monthly Combined Assurance Committee and quarterly Risk Committee reporting
• Coordinated risk management across all business units (CIT, ADT, Guarding) building a comprehensive risk universe
• Executed ESG, SOX, Anti-Money Laundering, POPIA, FICA, and Firearms Act compliance programs
• Facilitated Group ISO certification and IT risk management (Cyber Security, COBIT)
• Led Business Continuity Planning for the entire group, including: Strike Management & Grid Collapse response, Business Impact Analysis (BIA), DR Planning for Cash-in-Transit and Guarding divisions

Internal Audit Manager at Fidelity Services Group (2018 – 2021-10)

• Established the Audit Universe and developed the Internal Audit Charter
• Directed 3-year internal audit planning, investigations management, and reporting to Audit & Risk Committees
• Managed tip-off anonymous Programme

Senior Internal Auditor at Grant Thornton SNG (2017-04 – 2018-03)

• Supervised audit staff (2–5 members), developed risk matrices via ERM workshops
• Executed operational and internal audits across various client engagements

Senior Internal Auditor at BDO Risk & Advisory Services (2016-04 – 2017-03)

• Planned and implemented internal control systems; executed operational and internal audits

Auditor / Internal Audit Consultant at SekelaXabiso Risk & Advisory Services (2008 – 2013)

• Completed internal audit articles in 2013; progressed from external to internal audit post-merger
• Supervised junior consultants (2–15 staff); executed internal and operational audits
• Clients included Transnet, Eskom, PRASA, Auditor General, Bokoni Platinum Mine, GIC RE Insurance, Metorex (DRC)

Professional Internal Auditor in Internal Audit – Institute of Internal Auditors (2013)

Internal Audit Technician in Internal Audit – Institute of Internal Auditors (2012)

Management advancement Program in Management – WITS (2026-06)