Job Description

BAT is evolving at pace - truly like no other organisation.

To achieve the ambition, we have set for ourselves, we are looking for colleagues who are ready to live our ethos every day. Come be a part of this journey!

BAT DIGITAL BUSINESS SOLUTIONS IS LOOKING FOR BUSINESS CONTROLS ANALYST - IT

JOB TITLE: Business Controls Analyst - IT

FUNCTION: Finance

SUB FUNCTION: Business Controls

LOCATION: Selangor, Malaysia

ROLE POSITIONING AND OBJECTIVES

The role involves supporting BAT's Risk Management & Governance Framework, including SOx Compliance, testing, reporting, and project initiatives. It also includes conducting Internal Controls assurance activities and reporting findings using structured tools and techniques to support the internal control process.

WHAT YOU WILL BE ACCOUNTABLE FOR

• Support the Business Controls Team in developing their role as the second line of defense within BAT.
• Ensure all work is thoroughly documented according to the BCT Methodology and the SOx Testing process, following best practices in internal controls.
• Conduct Controls Advisory and Assurance work in accordance with Audit Standards to facilitate reliance from External Audit.
• Perform SOx ITGC testing and provide timely reporting to the SOx Test Manager, including IT process assessments.

• Communicate identified issues from SOx testing to relevant stakeholders promptly.
• Assist Control Owners in developing remediation plans and addressing issues in a timely manner.
• Monitor and report on outstanding actions related to SOx findings.
• Support and participate in training Control Operators and Owners to enhance the effectiveness of internal controls over financial reporting across the Group.
• Support the BC team members globally with GRC master data requirements.
• Opportunity to develop continuous control monitoring and access monitoring using GRC solutions.
• Assist in 1 to 2 GRC projects annually and provide master data support to the global team throughout the year.
• Engage with global stakeholders, comprehend business requirements, and propose solutions with minimal guidance.
• Participate in the Technology working group within the Business Controls Team, responsible for maintaining controls master data, constructing, and testing control monitoring scripts, and reviewing user security reports.

ESSENTIAL EXPERIENCE, SKILLS AND KNOWLEDGE

• Having a degree is a requirement for this role and possessing a professional qualification in Internal Controls (e.g., CISA, CISSP, CIA, ACCA, or equivalent) would be an additional advantage.
• Possessing 3-5 years of experience in risk internal controls, audit, or compliance is necessary for this role.
• Prior experience in a global FMCG or similar dynamic operating environment is advantageous.
• Demonstrate effective verbal and written communication skills, with the ability to clearly articulate control issues, risks, impacts, and recommendations to management.
• Possess a strong knowledge of internal controls practices, principles, and procedures, as well as corporate governance requirements for a global Group, including Internal Controls over Financial Reporting (ICoFR).
• Exhibit critical problem-solving skills and a keen interest in analyzing business data with attention to detail.
• Have experience in internal or external audit, or other SOx testing of IT processes, with the ability to identify control gaps and provide recommendations for remediation.
• Demonstrate experience in IT Audit (internal or external), IT General Controls (ITGC), or other IT SOx testing spanning various IT domains (access, program change, program development, computer operations, cyber security), with the ability to identify control gaps and propose solutions.
• Experience in reviewing outsourced IT Operations and assessing Third-Party Assurance reports, such as SOC reports, for adequacy and their impact on the services provided, is a plus.
• Possess knowledge and experience in controls-related data analytics, particularly in an auditing context, which would be advantageous.
• Familiarity with ERP systems such as SAP and Salesforce, as well as GRC solutions, would be beneficial.
• Proficiency in data analytics and coding skills such as Python, R, or tools like Alteryx would be useful.
• Knowledge of SOx best practices, testing, and reporting approaches would be advantageous.

WE ARE BAT

At BAT we are committed to our Purpose of creating A Better Tomorrow. This is what drives our people and our passion for innovation. See what is possible for you at BAT.

• Global Top Employer with 53,000 BAT people across more than 180 markets
• Brands sold in over 200 markets, made in 44 factories in 42 countries
• Newly established Tech Hubs building world-class capabilities for innovation in 4 strategic locations
• Diversity leader in the Financial Times and International Womens Day Best Practice winner
• Seal Award winner - one of 50 most sustainable companies

BELONGING, ACHIEVING, TOGETHER

Collaboration, diversity and teamwork underpin everything we do here at BAT. We know that collaborating with colleagues from different backgrounds is what makes us stronger and best prepared to meet our business goals. Come bring your difference!

British American Tobacco