About the role

  • Senior Business Controls Manager providing strategic advisory on IT controls design and governance for BAT in Malaysia. Leading a team and ensuring compliance within technology transformation programs.

Responsibilities

  • Provide strategic advisory on IT controls design and governance from a second line of defense perspective for major transformation programs, including but not limited to ECC → S/4HANA migration
  • Ensure robust integration of SOx controls, IT General Controls (ITGC), and IT Automated Controls (ITAC) into evolving system landscapes, supporting BAT’s global risk management framework
  • Lead a team of control specialists and manage third-party partners to deliver high-quality outcomes
  • Serve as the primary BCT representative and subject matter expert for large-scale ERP and technology transformation programs
  • Coordinate BCT activities related to IT controls advisory across multiple initiatives, ensuring alignment with governance and compliance objectives
  • Act as a key liaison between program teams, BCT, and interested parties (Program Governance, Technical Leads, Process Owners, Control Owners, Internal & External Audit)
  • Provide advisory on SOx controls, ITGC, and ITAC design for new systems and processes, embedding controls into design/build/test phases
  • Advise on risk mitigation strategies and compliance requirements during system implementations and upgrades
  • Conduct control impact assessments for major technology changes (e.g., ECC to S/4HANA), mapping existing controls and identifying gaps
  • Champion automation and standardization in control design to enhance efficiency and reduce complexity
  • Perform independent testing of ITGC and ITAC controls to validate design effectiveness and operational readiness
  • Review evidence and documentation for completeness and accuracy, ensuring audit readiness
  • Provide assurance reporting to governance committees and support external auditor reliance on management testing
  • Identify control deficiencies and partner with interested parties to drive timely remediation
  • Advise on controls for data migration and integration activities, ensuring validation, reconciliation, and audit readiness
  • Collaborate with data and technical leads to define governance checkpoints for extraction, transformation, and loading processes
  • Lead and develop a team of IT controls specialists, fostering a culture of collaboration, accountability, and continuous learning
  • Manage relationships with co-source partners and external advisory firms, ensuring delivery quality and alignment with program objectives
  • Negotiate scope, monitor performance, and enforce compliance with contractual obligations and BAT standards

Requirements

  • Deep expertise in IT SOx controls, ITGC and ITAC frameworks across ERP environments (SAP ECC, S/4HANA preferred)
  • Proven experience in large-scale technology transformation programs, with focus on controls design, risk assessment, remediation, and testing
  • Strong understanding of SOx requirements, internal control frameworks, and audit standards
  • Hands-on experience with SAP GRC or similar tools for security, authorizations, and SoD management
  • Exceptional stakeholder engagement and communication skills; ability to influence senior leadership
  • Strategic leadership capability to shape global control standards and advise governance committees
  • Experience managing cross-functional teams and third-party vendors in complex global environments
  • Background in Big 4 advisory or similar high-pressure transformation contexts
  • Future-fit mindset: ability to drive automation, analytics, and digitalization of controls processes
  • Preferred certifications: CISSP, CISM, CRISC, CIA

Benefits

  • market leading annual performance bonus (subject to eligibility)
  • diverse health plans
  • initiatives for work-life balance
  • transportation support
  • flexible holiday plan with additional incentives
  • online learning platforms
  • personalized growth programs

Job title

Senior Business Controls Manager – IT

Job type

Experience level

Senior

Salary

Not specified

Degree requirement

No Education Requirement

Tech skills

Location requirements

Report this job

See something inaccurate? Let us know and we'll update the listing.

Report job