Job Description

Company Description
About Grab and Our Workplace
Grab is Southeast Asia's leading superapp. From getting your favourite meals delivered to helping you manage your finances and getting around town hassle-free, we've got your back with everything. In Grab, purpose gives us joy and habits build excellence, while harnessing the power of Technology and AI to deliver the mission of driving Southeast Asia forward by economically empowering everyone, with heart, hunger, honour, and humility.

Get to know the team:
At Grabber Technology Solutions (GTS), we revolutionise the technology experience for every Grabber. Our mission is to empower our team with seamless and innovative solutions that enhance their daily work. We are a diverse group of forward-thinkers committed to creating personalised IT experiences. If you're passionate about customer-centric innovation and eager to make a significant impact on technology at Grab, come join us and help shape the future of technology.
Get to know the Role
Reporting to the Senior Manager, Finance Systems, this role will be contributing to maintaining and enhancing Grab's financial systems controls processes and documentation. You will lead Grab's Governance, Risk & Compliance (GRC) initiatives and will be ensuring that any newly implemented applications have the appropriate controls embedded to meet our defined policies.
Experienced candidates who have played a part in managing Financial Systems' risks, controls and security for global organizations should apply here!
This role will be based in Malaysia and onsite.
The Day-to-Day Activities

• Develop and manage a comprehensive GRC framework aligned with industry standards and regulatory requirements.
• Conduct IT risk assessments; identify and assess IT risks, evaluate countermeasures and recommend effective controls to mitigate IT risks.
• Manage Grab Finance Systems security access and controls and the yearly User Access Review.
• Assist with the management and coordination of audits (e.g. IT SOX) and collaborate with various departments, including IT, legal, and finance, to ensure cohesive GRC practices.
• Monitor IT risks, map risk profiles and manage the IT risk register.
• Identify and implement initiatives to promote and uplift the IT Risk Management culture.
• Identify gaps in processes and make sound recommendations to stakeholders.
• Review and assess IT Implementation to ensure IT Project Governance / IT Security is adhered to the organization policies.
• Review of the results from testing and the training of a wide range of stakeholders. The governance and monitoring of financial application controls.
• Identify and support auditing needs e.g. reporting and making sense out of logs.
• Collaborate with Product and IT teams to assess and monitor data security and compliance measures based on project requirements and regional regulations.
• Perform ad-hoc independent thematic reviews on IT processes to uncover issues and follow through with the remediation action plan.

Qualifications
What Essential Skills You Will Need

• Minimum of 8 years in managing the controls and documentation of financial applications.
• Strong understanding of IT governance frameworks and industry standards (e.g., COBIT, COSO, ITIL, ISO/IEC 27001).
• Strong experience mainly in Oracle ERP and EPM Cloud Role-Based Access Control (RBAC). Similar experience in other financial systems is required.
• Strong and deep knowledge in change/enhancement requests lifecycles e.g. configuration and development, SIT/UAT, release packaging/management within Financial ERP space.
• Ability to make sense and detect impacts e.g. if enhancements are made to a process, what other processes/data points are impacted in ERP from a Controller perspective.
• Strong communications skills with ability to build strong relationships and trust with mid-senior leaders and stakeholders across multiple departments
• Experienced in managing internal and external auditors asks for relevant finance processes and governance requirements.
• Experienced implementing SOX compliance & audit controls for financial and planning systems (e.g. Change Management, Release Management).

The Nice-to-Haves

• Oracle Cloud Financials, Procurement Cloud and EPM.
• Knowledge of CyberArk system or other Identity Security systems.
• Professional certifications such as CISA are preferred.

Additional Information
Life at Grab
We care about your well-being at Grab, here are some of the global benefits we offer:

• We have your back with Term Life Insurance and comprehensive Medical Insurance.
• With GrabFlex, create a benefits package that suits your needs and aspirations.
• Celebrate moments that matter in life with loved ones through Parental and Birthday leave, and give back to your communities through Love-all-Serve-all (LASA) volunteering leave
• We have a confidential Grabber Assistance Programme to guide and uplift you and your loved ones through life's challenges.
• Balancing personal commitments and life's demands are made easier with our FlexWork arrangements such as differentiated hours

What We Stand For At Grab
We are committed to building an inclusive and equitable workplace that provides equal opportunity for Grabbers to grow and perform at their best. We consider all candidates fairly and equally regardless of nationality, ethnicity, race, religion, age, gender, family commitments, physical and mental impairments or disabilities, and other attributes that make them unique.