Senior Internal Controller

Sourceo Pte Ltd; Shah Alam; On-site; MYR 120,000 - 180,000; Full time

Job summary

Sourceo Pte Ltd in Malaysia seeks an experienced Internal Controller to implement and sustain a robust internal control framework across entities, aligned with Group standards and acquisitions. You will oversee SoD reviews, access controls, ICSA programmes, and process risk assessments, partnering with Finance, IT, HR, and regional teams to drive remediation and continuous improvement.

The role emphasizes governance, risk management, and stakeholder collaboration to strengthen controls within

Qualifications

• Experience implementing internal control frameworks across multiple entities.
• Strong knowledge of governance, risk management and control environments.
• Familiarity with Segregation of Duties (SoD) reviews and access controls.
• Experience coordinating with cross-functional teams (Finance, IT, HR, operations).

Responsibilities

• Implementation and maintenance of an effective internal control framework across assigned entities and processes, in line with Group standards, including companies that newly acquired.
• Ensure controls are properly designed, documented, and embedded within operational workflows (Finance and non-Finance), rather than treated as standalone or compensating controls
• Perform internal control reviews and walkthroughs covering key end-to-end processes such as RTR, PTP, OTC, Master Data, HR, Supply Chain, and other relevant activities
• Monitor compliance with company policies, approval workflows, Delegation of Authorities (DoA), and internal control procedures
• Perform ad hoc duties and special assignments as required by management.

Skills

Internal controls

Governance

Risk management

Segregation of Duties

ICSA

Process improvement

Job description

• Implementation and maintenance of an effective internal control framework across assigned entities and processes, in line with Group standards, including companies that newly acquired
• Ensure controls are properly designed, documented, and embedded within operational workflows (Finance and non-Finance), rather than treated as standalone or compensating controls
• Perform internal control reviews and walkthroughs covering key end-to-end processes such as RTR, PTP, OTC, Master Data, HR, Supply Chain, and other relevant activities
• Monitor compliance with company policies, approval workflows, Delegation of Authorities (DoA), and internal control procedures
• Perform ad hoc duties and special assignments as required by management.

Segregation of Duties (SoD)

• Perform reviews of user access rights and role assignments to identify potential SoD conflicts.
• Coordinate with Finance, IT, HR, GBS, and management teams to remediate SoD issues and strengthen preventive controls.
• Support periodic access reviews and promote awareness of SoD principles across teams.

Internal Control Self-Assessment (ICSA) & Control Evidence

Lead the end-to-end execution of the ICSA programme for designated entities in accordance with Group requirements, including conducting process walkthroughs, interviewing control owners, collecting and validating supporting evidence, and completing control assessments.

• Coordinate and support the annual Internal Control Self-Assessment (ICSA) process for assigned entities and processes.
• Ensure timely completion, quality of responses, and availability of adequate supporting control evidence.
• Review ICSA results, identify control gaps or weaknesses, and support management in defining and tracking remediation action plans.
• Contribute to the maintenance of a structured, consistent, and auditable repository of control documentation and evidence.

Process Optimization & Transformation

• Act as a trusted internal control partner and advisor to management within the assigned scope.
• Provide guidance and hands-on support to reinforce internal control awareness and compliance culture.
• Escalate key risks, control deficiencies, or recurring issues with clear analysis and practical recommendations.
• Work closely with Regional & Country teams, GBS process owners, Group Internal Control, and Internal Audit teams.
• Evolve internal control environment

Stakeholder Management

• Work closely with:
• Regional and country Finance / Operations management
• Other team that required advises from Internal Controller
• Act as a trusted advisor to management teams on internal control, governance, and risk management matters.
• Participate in all audit missions within the perimeter and internationally as per Group needs.
• Assess entity-specific risks and recommend local controls to mitigate them.
• Incorporate process audits into the annual audit plan, ensuring all processes are reviewed.
• Conduct risk-based on-site assessments of key suppliers/logistics providers, coordinating with local management and purchasing teams, and report findings for action.
• Escalate key risks, control breaches, or delivery concerns with clear analysis and recommendations.