Risk & Internal Control Director (Hong Kong / Singapore / Shanghai)

EcoCeres, Inc.; Singapore; Sur place; SGD 180 000 - 280 000; Plein temps

Résumé du poste

EcoCeres, Inc. seeks a Risk & Internal Control Director to build the internal control framework from the ground up. The role covers financial controls, operational processes, regulatory compliance, and investor confidence.

You will establish a risk registry, develop and maintain Risk-Control Matrices, and drive control improvements across departments. Strong COSO knowledge and ERP experience are essential for success.

Qualifications

• Comprehensive understanding of oil & gas and renewable energy sectors.
• Hands-on experience with Enterprise Risk Management in energy sector companies.
• Process control expert with ability to design and improve business processes.
• 10+ years of progressive experience in Internal Audit, Internal Controls, or Risk Advisory/BPR.
• COSO Internal Control—Integrated Framework knowledge; experience designing RCMs, narratives, and flowcharts.

Responsabilités

• Set up risk registry identifying major risks across the business.
• Maintain the Group internal control framework aligned with COSO and SAF business realities.
• Define control standards and documentation requirements; develop and maintain Risk-Control Matrices for key cycles.
• Support development, design, and implementation of controls across departments.
• Draft and roll out policies and procedures; support remediation of issues.
• Review segregation of duties conflicts and ERP role design.
• Coordinate with IT on access reviews and user provisioning controls.
• Deliver internal control guidance and training to promote a strong control environment.
• Develop continuous operational control monitoring with KCIs and dashboards.
• Act as liaison for internal and external auditors and ensure audit readiness.

Connaissances

Oil & gas knowledge

ERM

Process control

BPR

COSO knowledge

RCM design

ERP systems

ITGCs

Stakeholder comms

CIA/CISA

Formation

Bachelor’s degree in Risk Management

Master’s degree (MBA)

Outils

Oracle

SAP

Description du poste

Key Responsibilities

This is a newly created role reporting directly to the CFO. As our Risk & Internal Control Director, you will be responsible for building the internal control framework from the ground up. You will not just be looking at traditional financial controls; your scope will extend into the operational processes that drive our revenue, our regulatory compliance, and our investor confidence.

• Setup the risk registry and universal for the company which identify and evaluate major risks across the business:

1. Volatility in product and feedstock price
2. Regulatory & policy changes
3. Energy price fluctuations
4. Plant running risk and production process inefficiencies
5. Construction and project management risk
6. Environment and HSE risk
7. Product risk
8. Reputational risk
9. Legal and compliance risk
10. IT & Cybersecurity Risk
11. Financial Risk, etc

• Maintain the Group internal control framework, ensuring it remains aligned with the COSO Integrated Framework and tailored to the operational realities of SAF business.
• Define control standards and documentation requirements, including the development and maintenance of Risk-Control Matrices (RCMs) for all critical business cycles.
• Support the development, design, and implementation of controls across departments to streamline key processes.
• Support business unit in drafting and rolling out policies and procedures.
• Support and track the resolution of compliance issues, audit findings, and control gaps. Monitor the remediation of identified control deficiencies to ensure sustainable corrective actions are taken.
• Review and monitor segregation of duties (SoD) conflicts, including role design in ERP systems.
• Coordinate with IT on access reviews and user provisioning controls.
• Deliver internal control guidance and training; promote a strong control environment and elevate internal control awareness across the organization.
• Support risk assessment and develop continuous operational control monitoring, including the tracking of Key Control Indicators (KCIs) and dashboards.
• Act as the contact for internal and external auditors, ensuring the company is audit-ready for financial auditors and certification bodies.

Qualifications & Experience

• Comprehensive understanding of oil & gas / renewable energy sector across different operational areas.
• Hands-on experience of Enterprise Risk Management in a energy sector company.
• Process control expert – logical thinker and designer for business process with continuous improvement.
• 10+ years of progressive experience in Internal Audit, Internal Controls, or Risk Advisory, BPR.
• Bachelor’s degree in Risk Management, Energy Sector, or a related field. A Master’s degree (e.g., MBA) is an advantage.
• Deep knowledge of COSO Internal Control—Integrated Framework. Experience designing RCMs, narratives, and flowcharts from scratch.
• Experience with large ERP systems (e.g., Oracle, SAP) and a strong understanding of IT General Controls (ITGCs).
• Proven ability to communicate complex control concepts to diverse stakeholders (e.g., plant managers, engineers, traders) and drive change in a fast-paced environment.
• Professional certification such as CIA, or CISA.