SH - Internal Audit & Risk Management

Key Responsibilities:

Risk Management Activities

• Prepare, review, and implement the Enterprise Risk Management (ERM) Policy and Manual
• Partner with business units to execute risk management-related tasks
• Follow up with units to ensure timely quarterly risk reviews and attend meetings wherever applicable
• Drive awareness and training initiatives to foster a risk-aware culture across teams
• Support CFO in organizing Risk Management Committee meetings, preparing presentations, and ensuring follow-through on committee feedback

SOPs, Manuals, Guidance Notes, and Best Practices

• Identify areas that need standard operating procedures (SOPs), manuals, or guidance documentation
• Develop and implement SOPs across units to ensure operational control and standardization
• Periodically review and update existing SOPs to maintain relevance and accuracy

Internal Audit Activities

• Assist in drafting the annual internal audit plan
• Monitor and track the status of internal audit executions across locations
• Coordinate with internal auditors and location teams to ensure audits are completed on schedule
• Analyze audit reports and initiate required actions based on findings
• Provide suggestions to strengthen internal control mechanisms
• Support CFO in Audit Committee meetings by preparing presentations and ensuring action items are implemented
• Monitor and drive closure of audit observations

Internal Financial Controls (IFC)

• Conduct continuous reviews of risk control matrices
• Initiate and review self-assessments of internal financial controls at all units
• Ensure timely closure of gaps identified during assessments
• Liaise with statutory auditors on IFC reporting gaps and drive resolution within deadlines

Strategic Initiatives and Support to CFO

• Assist CFO in reviewing documents such as CREC/BRP/BRC submissions
• Build financial models to aid strategic decision-making
• Provide timely data and information as requested by CFO
• Review presentations and reports (Investor, Board, Audit Committee, CHMO, etc.) to ensure data integrity and completeness