Internal Control Manager

EPOS; Kuala Lumpur; On-site; MYR 180,000 - 240,000; Full time

Job summary

EPOS seeks an Internal Control Manager to design, implement and monitor internal control systems, safeguarding assets and optimizing efficiency.

You will design COSO-aligned controls, ensure Malaysia/regional compliance, and coordinate with auditors to remediate findings. Strong data analytics, communication, and regulatory knowledge are essential for success.

Qualifications

• Bachelor's degree or above.
• 5+ years in internal/external audit or risk management related work.
• Big Four, financial sectors or internet companies preferred.
• COSO/COBIT knowledge would be preferred.
• English business fluency; Chinese would be preferred.

Responsibilities

• Design and maintain internal control framework aligned with COSO standards and group policies.
• Ensure compliance with Malaysia and Southeast Asia regulatory requirements.
• Conduct upfront control design for new product/business launches.
• Audit coordination with external auditors and group internal audit teams; drive remediation.
• Establish KRIs for high-risk areas and maintain risk registers with management.

Skills

Data analytics

Communication skills

English proficiency

Adaptability

Analytical thinking

Education

Bachelor's degree or above

Tools

SQL

COSO/COBIT knowledge

Internal control certifications (CIA/CPA/CISA)

Job description

The Internal Control Manager will be responsible for designing, implementing, and monitoring the company's internal control systems to safeguard assets and optimize operational efficiency.

Key Responsibilities

1. Internal Control Framework

• Design and maintain internal control framework aligned with COSO standards and group policies
• Ensure compliance with Malaysia and Southeast Asia regulatory requirements
• Conduct upfront control design for new product/business launches

2. Key Process Control Design

• Sales & Commission: Merchant onboarding, commission calculation, approval workflows, revenue process and revenue recognization control
• Payment Operations: Payment processing, reconciliation, exception handling, fund security
• Cross-Border Specifics: FX rates, fund flows, settlement cycles, AML/sanctions compliance
• Conduct risk assessments to identify control gaps and operational vulnerabilities
• Establish Key Risk Indicators (KRI) for high-risk areas (fund security, AML, merchant onboarding)
• Maintain risk register and report to local management and group risk team

4. Audit Coordination & Remediation

• Liaise with external auditors and group internal audit teams
• Drive root-cause analysis and systemic improvements for audit findings

Skill Required

• Bachelor's degree or above;
• At least 5 years' experience in internal/external audit or risk management related work. Working experience in Big Four, financial sectors or Internet companies would be preferred;
• Have related internal control work experience in M&A/startup is preferred.
• Understanding of local regulatory requirements and relevant laws and regulations;
• Highly energized and positive, adapt to changes, be creative and able to quickly learn and understand innovative financial business. Have Business thinking and well-developed communication skills, and be able to communicate well with business side;
• Business fluent in English. Fluent in Chinese would be preferred;
• Have data analytical capabilities, able to use SQL or equivalent data analysis tool would be preferred;
• Familiar with COSO, COBIT, Holder of CIA, CPA, CISA or similar certificates would be preferred;