Senior Risk and Internal Control Manager

General
As part of the Enterprise Governance Risk and Control (EGRC) team, drive RFC's control activities and review various business requests related to risk & control (e.g. risk deep-dives, control implementations, control optimizations, global policy establishment & control standard setting, etc.)
Drive RFC's distributor internal control compliance activities (i.e. monitor compliance, follow up on exceptions and perform investigations)
Continuously creating awareness of internal controls and enhancing the risk & control culture and mindset within the organisation.
Specific:
Perform risk-based internal control set (ICF) scoping by alignment with organisation and Compliance team
Roll-out new/enhanced controls and provide expertise towards more junior team members
Plan and coordinate control testing activities including training of assessors and perform own (design) assessments and quality review.
Review of ICF findings, design remediation plan with control owner, follow up with entities to ensure complete and timely closure of ICF findings
Periodic (HY1, Q3 and Q4) reporting to Management on ICF performance (Sign- off Management statement, ICF dashboard and findings list)
Coordinate the follow up on identified distributor exceptions and work with stakeholders to implement improvement actions
Plan and coordinate specific distributor deep-dive and investigation(s)
Periodic reporting of distributor internal controls compliance status to Management
Perform periodic assessment on Segregation of Duties (SOD) conflicts and critical access right review
Work with organization and Governance and Technology team to reduce SOD conflict and critical access
Coordinate SOD improvement activities
Coordinate with Corporate Internal Audit (CIA) and entities on audit planning and execution (i.e. audit timing, scope, assessment questions, arranging meetings, on-site support, gathering of audit evidences)
For audit issues raised, work with entities to define effective and efficient remediation action plans (determine action owner and realistic deadline for audit issues)
Follow up with action owners to ensure complete and timely closure of audit issues
Periodic reporting to Management on status of audit issues
Coordinate with entities to prepare required control documents based on external audit request, including explaining of business processes and control environment of entity.
Participate in global/regional Risk & Control related engagements and support larger or manage smaller Risk & Control engagement based on subject matter expertise
Xem thêm