Your mission:

The Risk & Compliance team aims to ensure risk management, internal control and compliance within the company, following the standards imposed by the group and which aims more particularly to ensure:

• the compliance with laws and regulations;

• the application of the instructions and guidelines set by the General Management and the Pluxee Group;

• the proper functioning of the company's internal processes, in particular those contributing to the safeguarding of its assets;

• the reliability of financial information.

Your Responsibilities:

Risk Management & Internal Control:

• Identify the risks and define the controls to be carried out using the processes and key controls to cover these risks.

• Carry out regular internal tests (following the COSO methodology), to ensure that the identified risks are controlled. This includes:

• complete the group template describing the control and the risks it covers;

• master audit techniques: definition of sampling and test method, reporting of results, definition of action plans,...;

• make recommendations for action plans when risks are not controlled;

• Discuss and communicate these recommendations with the control owner;

• provide support for the implementation of these if necessary.

• Identify and formalize major risks (matrix). Definition of the controls in place and the measures to be taken to cover residual risks, communication of these risks with the COMEX and definition of an action plan owner.

• Within each process, be responsible for the correct segregation of duties.

• Represent the department in ongoing projects within Pluxee

• Manage and update the reporting tool (MEGA).

• Identify deviations from Sodexo's internal policies in collaboration with the various departments involved in these processes and propose an action plan for these deviations (e.g. Card Policy, Card Flow Policy, Subcontracting Policy, Golden Rules IT, etc.)

• Take the position of a business partner of all departments in order to help them in any change in organization and operation, in any implementation of new tools and processes.

Compliance :

• Assess the major risks in terms of Compliance by following the Pluxee methodology, definition of the controls and the measures to cover residual risks, communication of these risks with the COMEX.

• Ensure compliance with applicable laws, regulations and guidelines:

• Implement our anti-corruption obligations, including the 8 pillars of the French Sapin 2 law, as part of a structured compliance program (the Pluxee Program: Responsible Business Conduct). This includes the Code of Conduct, Business Integrity Guide, Gift Policy, etc.;

• Contribute to the creation and animation of a "compliance culture" through internal training sessions, emails etc.

• Verify compliance with product legislation in collaboration with the legal department.

• Set up and monitor the ethics and compliance committee.

Control of subcontractors:

• Carry out process reviews at our main subcontractors and carry out the control tests included in the local scoping at our main subcontractors and identify any deviations.

External audits:

• Coordinate and prepare internal audits of the Group and ensure the follow-up of action plans once the mission has been completed

• Prepare and plan the external controls of the company auditors, report any identified deviations and monitor the implementation of the corresponding action plans

• Assist in the implementation of Quality audits (ISO9001:2015, ISAE3402).