Risk & Internal Control Director (Hong Kong / Singapore)

This is a newly created role reporting directly to the CFO. As our Risk & Internal Control Director, you will be responsible for building the internal control framework from the ground up. You will not just be looking at traditional financial controls; your scope will extend into the operational processes that drive our revenue, our regulatory compliance, and our investor confidence.

Key Responsibilities

• Setup the risk registry and universal for the company which identify and evaluate major risks across the business:
• Volatility in product and feedstock price
• Regulatory & policy changes
• Energy price fluctuations
• Plant running risk and production process inefficiencies
• Construction and project management risk
• Environment and HSE risk
• Product risk
• Reputational risk
• Legal and compliance risk
• IT & Cybersecurity Risk
• Financial Risk, etc
• Maintain the Group internal control framework, ensuring it remains aligned with the COSO Integrated Framework and tailored to the operational realities of SAF business.
• Define control standards and documentation requirements, including the development and maintenance of Risk-Control Matrices (RCMs) for all critical business cycles.
• Support the development, design, and implementation of controls across departments to streamline key processes.
• Support business unit in drafting and rolling out policies and procedures.
• Support and track the resolution of compliance issues, audit findings, and control gaps. Monitor the remediation of identified control deficiencies to ensure sustainable corrective actions are taken.
• Review and monitor segregation of duties (SoD) conflicts, including role design in ERP systems.
• Coordinate with IT on access reviews and user provisioning controls.
• Deliver internal control guidance and training; promote a strong control environment and elevate internal control awareness across the organization.
• Support risk assessment and develop continuous operational control monitoring, including the tracking of Key Control Indicators (KCIs) and dashboards.
• Act as the contact for internal and external auditors, ensuring the company is audit-ready for financial auditors and certification bodies.

Qualifications & Experience

• Comprehensive understanding of oil & gas / renewable energy sector across different operational areas.
• Hands-on experience of Enterprise Risk Management in a energy sector company.
• Process control expert – logical thinker and designer for business process with continuous improvement.
• 10+ years of progressive experience in Internal Audit, Internal Controls, or Risk Advisory, BPR.
• Bachelor's degree in Risk Management, Energy Sector, or a related field. A Master's degree (e.g., MBA) is an advantage.
• Deep knowledge of COSO Internal Control—Integrated Framework. Experience designing RCMs, narratives, and flowcharts from scratch.
• Experience with large ERP systems (e.g., Oracle, SAP) and a strong understanding of IT General Controls (ITGCs).
• Proven ability to communicate complex control concepts to diverse stakeholders (e.g., plant managers, engineers, traders) and drive change in a fast-paced environment.
• Professional certification such as CIA, or CISA.