Risk & Internal Control Director (Hong Kong / Singapore)

EcoCeres, Inc.; Singapore; On-site; SGD 180,000 - 240,000; Full time

Job summary

EcoCeres, Inc. in Singapore seeks a strategic Risk & Internal Control Director to report directly to the CFO. This newly created role will build the internal control framework from the ground up, spanning financial, operational, regulatory, and investor-facing controls.

You will establish the risk registry, define control standards and RCMs, and collaborate with IT and business units to embed effective controls across ERP systems, policies, and procedures.

Qualifications

• Comprehensive knowledge of COSO Internal Control framework.
• Experience designing RCMs, narratives, and flowcharts from scratch.
• Hands-on ERP experience (Oracle/SAP) and ITGC understanding.
• Proven ability to communicate complex control concepts to diverse stakeholders.

Responsibilities

• Setup and maintain risk registry across the business.
• Build and implement the internal control framework (COSO-aligned).
• Develop and maintain Risk-Control Matrices for critical cycles.
• Define control standards, documentation, and procedures.
• Coordinate with IT on access reviews and control testing.
• Monitor remediation of control gaps and audit findings.
• Act as primary contact for auditors and certification bodies.

Skills

COSO Internal Control

ERP/ITGCs

Stakeholder Communication

Risk Management

Process Improvement

Education

Bachelor’s in Risk Management or related field

MBA an advantage

Tools

SAP

Oracle

Job description

This is a newly created role reporting directly to the CFO. As our Risk & Internal Control Director, you will be responsible for building the internal control framework from the ground up. You will not just be looking at traditional financial controls; your scope will extend into the operational processes that drive our revenue, our regulatory compliance, and our investor confidence.

Key Responsibilities

• Setup the risk registry and universal for the company which identify and evaluate major risks across the business:

1. Volatility in product and feedstock price
2. Regulatory & policy changes
3. Energy price fluctuations
4. Plant running risk and production process inefficiencies
5. Construction and project management risk
6. Environment and HSE risk
7. Product risk
8. Reputational risk
9. Legal and compliance risk
10. IT & Cybersecurity Risk
11. Financial Risk, etc

• Maintain the Group internal control framework, ensuring it remains aligned with the COSO Integrated Framework and tailored to the operational realities of SAF business.
• Define control standards and documentation requirements, including the development and maintenance of Risk-Control Matrices (RCMs) for all critical business cycles.
• Support the development, design, and implementation of controls across departments to streamline key processes.
• Support business unit in drafting and rolling out policies and procedures.
• Support and track the resolution of compliance issues, audit findings, and control gaps. Monitor the remediation of identified control deficiencies to ensure sustainable corrective actions are taken.
• Review and monitor segregation of duties (SoD) conflicts, including role design in ERP systems.
• Coordinate with IT on access reviews and user provisioning controls.
• Deliver internal control guidance and training; promote a strong control environment and elevate internal control awareness across the organization.
• Support risk assessment and develop continuous operational control monitoring, including the tracking of Key Control Indicators (KCIs) and dashboards.
• Act as the contact for internal and external auditors, ensuring the company is audit-ready for financial auditors and certification bodies.

Qualifications & Experience

• Comprehensive understanding of oil & gas / renewable energy sector across different operational areas.
• Hands-on experience of Enterprise Risk Management in a energy sector company.
• Process control expert - logical thinker and designer for business process with continuous improvement.
• 10+ years of progressive experience in Internal Audit, Internal Controls, or Risk Advisory, BPR.
• Bachelor’s degree in Risk Management, Energy Sector, or a related field. A Master’s degree (e.g., MBA) is an advantage.
• Deep knowledge of COSO Internal Control—Integrated Framework. Experience designing RCMs, narratives, and flowcharts from scratch.
• Experience with large ERP systems (e.g., Oracle, SAP) and a strong understanding of IT General Controls (ITGCs).
• Proven ability to communicate complex control concepts to diverse stakeholders (e.g., plant managers, engineers, traders) and drive change in a fast-paced environment.
• Professional certification such as CIA, or CISA.