Business Controls Analyst

BAT is evolving at pace - truly like no other organisation.

To achieve the ambition, we have set for ourselves, we are looking for colleagues who are ready to live our ethos every day. Come be a part of this journey!

SENIORITY LEVEL: Non Management

FUNCTION: Digital Business Solutions, Finance

LOCATION: Bandar Sunway, Selangor, Malaysia

ROLE POSITIONING AND OBJECTIVES

This role is part of GBS Corporate Finance Team.

The primary responsibility of the role is to proactively completes SOx Operating Effectiveness testing in line with agreed test plans & undertake Internal Controls assurance activities and report findings using structured tools and techniques to support the internal control process.

Reports to: Manager

Reporting Level: Leads/Manage Others: Senior Analyst

Geographic Scope: Selangor, Malaysia

WHAT YOU WILL BE ACCOUNTABLE FOR

Principal Accountabilities 

• Support the development of the overall role of the Business Controls Team as a second line of defense within BAT. 
• Ensuring all work is fully detailed in line with the BCT Methodology and the SOx Testing process, reflecting current good practice in internal controls. 
• Certain elements of Controls Advisory and Assurance work will need to be completed in line with Audit Standards to enable reliance from External Audit. 

Opportunity to participate in following business process reviews and control design advisory projects:

• Perform SOx ITGC testing and reporting to SOx Test Manager to agreed timelines (including in the space of IT processes). 

• Timely communication of issues identified during SOx testing to collaborators, customers, partners, and team members. 
• Support Control Owners to develop remediation plans and address issues in a timely manner. 
• Track and report on outstanding actions relating to SOx findings. 
• Support and participate in the delivery of training to Control Operators and Owners to support the effectiveness of internal controls over financial reporting across the Group. 

• Support the BCT team members (and globally) with master data requirements related to "" or equivalent experience. 
• the opportunity to develop continuous control monitoring and access monitoring using GRC solutions 
• The candidate is encouraged to provide support for 1 to 2 GRC projects yearly and offer master data assistance to the wider team.  
• We are seeking someone who can work closely with collaborators worldwide and grasp business requirements and solutions with minimal guidance. 
• Responsible for maintaining controls master data, building and testing control monitoring scripts, and review user security reports.

ESSENTIAL EXPERIENCE

• Degree educated or professional Internal Controls qualification (eg. CISA, CISSP, CIA, ACCA or equivalent).
• 3-5 years, risk internal controls or audit experience with significant accounting firm or corporate industry experience.
• Experience in global FMCG or similar dynamic operating environment is advantage.

KNOWLEDGE, SKILLS, EXPERIENCE

• Effective verbal and written communication skills with the ability to articulate control issues, risk, impact, and recommendations to management.
• Good knowledge of internal controls practices, principles and procedures and corporate governance requirements for a global Group, including Internal Controls over Financial Reporting (ICoFR)
• Critical problem solving, interest in analysing business data with attention to detail
• Experience in internal or external audit, or other SOx testing of IT processes, and able to identify control gaps and provide recommendation to address the issue.
• Experience in IT Audit (internal or external), IT general Controls (ITGC) or other IT SOx testing spread across IT domains (access, program change, program development, computer operations, cyber security), and able to identify control gaps and provide recommendation to address the issue.
• Experience in reviewing outsourced IT Operations and assessing various forms of Third-Party Assurance reports, e.g., SOC reports, for adequacy and impact on the services provided is a plus.
• Controls related data analytics - in auditing context would be an advantage
• Experience with ERP systems such as SAP, and Salesforce, and GRC solutions would be a plus. 
• Knowledge in data analytics/coding skills such as python, R or tools like Alteryx would be useful
• Familiarity with standard methodology, testing, and reporting approaches for SOx would be beneficial.

WORKING RELATIONSHIP 

• Managing outcomes / support needed diplomatically
• Ability to independently deliver projects and derive business value
• Building strong collaborative relationships with collaborators (other functions within BAT, for example the GRC team)
• Liaison with third party SOx testing staff / IT support

WE ARE BAT

At BAT we are committed to our Purpose of creating A Better Tomorrow. This is what drives our people and our passion for innovation. See what is possible for you at BAT.

• Global Top Employer with 53,000 BAT people across more than 180 markets
• Brands sold in over 200 markets, made in 44 factories in 42 countries
• Newly established Tech Hubs building world-class capabilities for innovation in 4 strategic locations
• Diversity leader in the Financial Times and International Women’s Day Best Practice winner
• Seal Award winner – one of 50 most sustainable companies

BELONGING, ACHIEVING, TOGETHER

Collaboration, diversity and teamwork underpin everything we do here at BAT. We know that collaborating with colleagues from different backgrounds is what makes us stronger and best prepared to meet our business goals. Come bring your difference!