Risk & Internal Control Director (Hong Kong / Singapore / Shanghai)

This is a newly created role reporting directly to the CFO. As our Risk & Internal Control Director, you will be responsible for building the internal control framework from the ground up. You will not just be looking at traditional financial controls; your scope will extend into the operational processes that drive our revenue, our regulatory compliance, and our investor confidence.

Key Responsibilities

• Setup the risk registry and universal for the company which identify and evaluate major risks across the business:

1. Volatility in product and feedstock price
2. Regulatory & policy changes
3. Energy price fluctuations
4. Plant running risk and production process inefficiencies
5. Construction and project management risk
6. Environment and HSE risk
7. Product risk
8. Reputational risk
9. Legal and compliance risk
10. IT & Cybersecurity Risk
11. Financial Risk, etc

• Maintain the Group internal control framework, ensuring it remains aligned with the COSO Integrated Framework and tailored to the operational realities of SAF business.
• Define control standards and documentation requirements, including the development and maintenance of Risk-Control Matrices (RCMs) for all critical business cycles.
• Support the development, design, and implementation of controls across departments to streamline key processes.
• Support business unit in drafting and rolling out policies and procedures.
• Support and track the resolution of compliance issues, audit findings, and control gaps. Monitor the remediation of identified control deficiencies to ensure sustainable corrective actions are taken.
• Review and monitor segregation of duties (SoD) conflicts, including role design in ERP systems.
• Coordinate with IT on access reviews and user provisioning controls.
• Deliver internal control guidance and training; promote a strong control environment and elevate internal control awareness across the organization.
• Support risk assessment and develop continuous operational control monitoring, including the tracking of Key Control Indicators (KCIs) and dashboards.
• Act as the contact for internal and external auditors, ensuring the company is audit-ready for financial auditors and certification bodies.

Qualifications & Experience

• Comprehensive understanding of oil & gas / renewable energy sector across different operational areas.
• Hands-on experience of Enterprise Risk Management in a energy sector company.
• Process control expert – logical thinker and designer for business process with continuous improvement.
• 10+ years of progressive experience in Internal Audit, Internal Controls, or Risk Advisory, BPR.
• Bachelor’s degree in Risk Management, Energy Sector, or a related field. A Master’s degree (e.g., MBA) is an advantage.
• Deep knowledge of COSO Internal Control—Integrated Framework. Experience designing RCMs, narratives, and flowcharts from scratch.
• Experience with large ERP systems (e.g., Oracle, SAP) and a strong understanding of IT General Controls (ITGCs).
• Proven ability to communicate complex control concepts to diverse stakeholders (e.g., plant managers, engineers, traders) and drive change in a fast-paced environment.
• Professional certification such as CIA, or CISA.