Stacey-Lee Kelly

Senior Manager with 15+ years of professional experience across public, private, and financial services sectors, including 10+ years of expertise in audit, risk, compliance, and governance, along with 5+ years of senior managerial experience. Currently with PwC's New York office leading IT General Controls, risk management, and SAP/Oracle system implementation audits for financial services and insurance clients including AIG, Prudential, and New York Life, managing a team of 7. Facilitates and project-manages system implementations such as SAP S/4HANA readiness assessments, on-prem to cloud data migrations, and SAP GRC ruleset assessments.

Prior to this, headed a 20-person SAP IT audit team at PwC South Africa, and managed Internal Audit, Risk Management, and Corporate Governance engagements since 2016, guiding clients through risk identification, classification, mitigation, and controls implementation. Deep knowledge of corporate governance (King III/IV), IT general controls, ISA, PCAOB, SOC Type I/II, and ISAE 3402. Part of PwC's senior management team piloting the AI Auditing framework, helping clients move from AI exploration into integration and tangible efficiencies.

Known for working efficiently under pressure, meeting tight deadlines, and interacting seamlessly with staff at all levels, including senior management and directors.

Senior Audit Manager: SAP IT, Internal Audit, Risk & Governance - PwC - New York, USA

(2022-01)

• Lead IT General Controls audits for SAP and Oracle systems, S/4HANA readiness assessments, and SAP GRC ruleset reviews for US-based financial services clients (AIG, Prudential, New York Life).
• Manage SDLC data migration audits (on-prem to cloud) and SOC Type I/II reviews; extended ITGC audits to UK clients (Core, Aspect) in partnership with UK PwC.
• Conduct and manage SAP systems audits covering access management, change management, computer operations, infrastructure, and SDLC control testing.
• Develop, document, implement, and maintain a comprehensive Internal Audit plan and system of internal controls compliant with applicable laws and regulations.
• Develop ERM frameworks, policies, and strategies aligned with ISO 31000, COSO, ISAE 3402, National Treasury Guidelines, and King III/IV; facilitate strategic and operational risk sessions with executive management.
• Spearheaded automation of risk assessments using SAP GRC, reducing manual effort by 40% and improving risk-scoring accuracy across business units; integrated real-time risk dashboards for proactive escalation to senior leadership.
• Lead inter-territory audit and risk activities across the UK, Tokyo Stock Exchange (TSE), and South Africa (SOX), adapting global audit frameworks to local regulatory and cultural environments.
• Manage team of 7 across budgeting, resourcing, WIP/recoverability, KPI-setting, mentoring, and client relationship ownership; lead business development, proposal writing, and client expectation management.

Senior Manager: Internal Audit, Risk Management & Governance - PwC South Africa - Johannesburg, SA

(2016-01 - 2021-12)

• Led a 20-person SAP IT audit team covering ITGCs, IT Application Controls (manual and automated), and SDLC controls for system migrations (Anglo American, Exxaro, NTT Data).
• Directed internal audit, risk management, and corporate governance engagements across mining, oil & gas, financial services, and public sector clients, improving end-to-end business processes.
• Conducted enterprise-wide Business Impact Assessments (BIA), and tested Business Continuity and Disaster Recovery Plans, including third-party continuity capability reviews.
• Delivered Supply Chain Management/Procurement audits (8+ years' experience) spanning compliance, supplier management, B-BBEE, and procurement process optimization.
• Led sustainability and climate-risk audits, integrating ESG and climate-related risks into enterprise risk frameworks and supporting non-financial disclosure controls.
• Facilitated risk assessment workshops, board evaluations, and Bid Evaluation/Adjudication committees; delivered ERM and risk training for multiple organizations.

Internal Auditor - Road Accident Fund (RAF) - South Africa

(2013-11 - 2016-03)

Headhunted by this state-owned entity to deliver Internal Financial Control training and implement the TeamMate Audit Repository Tool within the Internal Audit department.

• Conducted internal audits across Human Resources & Payroll, Accounts Payable/Receivable, Investment & Treasury Management, Debtor Management, Bank & Cash Management, Expenditure & Budget Management, Revenue Management, and Claims Management.
• Built and maintained strong client relationships across the organization.

Assistant Manager: Internal Audit, Risk & Governance - PwC South Africa - Johannesburg, SA

(2008-01 - 2013-10)

• Designed and implemented risk management policies and procedures aligned with organizational strategy and legal requirements; supported selected ERM software solutions.
• Oversaw risk identification and assessment processes; reported to the Audit Committee in a predetermined format, and led clients in building internal risk management programs.
• Managed target and budget goals, staff performance reviews, leave approvals, and WIP across advisory and assurance engagements.
• Built and maintained a network of subject-matter experts; kept stakeholders current on legislative changes and industry best practice.

Retail Banking Manager - Standard Bank - Western Cape, SA

(2003-04 - 2007-01)

• Led the Retail Banking division for the Western Cape, optimizing service delivery and improving sales performance by 10–15% per year.
• Supervised a team of 7; acted as branch risk officer verifying cheque authenticity and authorizing teller and inquiry functions.
• Conducted internal compliance audits on bank reconciliations and cheque verifications, and monthly surprise spot checks on teller cash.
• Reported fraudulent activity to Head Office and the Fraud Department; managed daily cash payouts to Treasury.

B.Com - Accounting

National Diploma - Internal Audit