About this role
This is a newly created role reporting directly to the CFO. As our Risk & Internal Control Director, you will be responsible for building the internal control framework from the ground up. You will not just be looking at traditional financial controls; your scope will extend into the operational processes that drive our revenue, our regulatory compliance, and our investor confidence.
Key Responsibilities
-
Setup the risk registry and universal for the company which identify and evaluate major risks across the business:
-
Volatility in product and feedstock price
-
Regulatory & policy changes
-
Energy price fluctuations
-
Plant running risk and production process inefficiencies
-
Construction and project management risk
-
Environment and HSE risk
-
Product risk
-
Reputational risk
-
Legal and compliance risk
-
IT & Cybersecurity Risk
-
Financial Risk, etc
-
Maintain the Group internal control framework, ensuring it remains aligned with the COSO Integrated Framework and tailored to the operational realities of SAF business.
-
Define control standards and documentation requirements, including the development and maintenance of Risk-Control Matrices (RCMs) for all critical business cycles.
-
Support the development, design, and implementation of controls across departments to streamline key processes.
-
Support business unit in drafting and rolling out policies and procedures.
-
Support and track the resolution of compliance issues, audit findings, and control gaps. Monitor the remediation of identified control deficiencies to ensure sustainable corrective actions are taken.
-
Review and monitor segregation of duties (SoD) conflicts, including role design in ERP systems.
-
Coordinate with IT on access reviews and user provisioning controls.
-
Deliver internal control guidance and training; promote a strong control environment and elevate internal control awareness across the organization.
-
Support risk assessment and develop continuous operational control monitoring, including the tracking of Key Control Indicators (KCIs) and dashboards.
-
Act as the contact for internal and external auditors, ensuring the company is audit-ready for financial auditors and certification bodies.
-
Qualifications & Experience
-
Comprehensive understanding of oil & gas / renewable energy sector across different operational areas.
-
Hands-on experience of Enterprise Risk Management in a energy sector company.
-
Process control expert – logical thinker and designer for business process with continuous improvement.
-
10+ years of progressive experience in Internal Audit, Internal Controls, or Risk Advisory, BPR.
-
Bachelor’s degree in Risk Management, Energy Sector, or a related field. A Master’s degree (e.g., MBA) is an advantage.
-
Deep knowledge of COSO Internal Control—Integrated Framework. Experience designing RCMs, narratives, and flowcharts from scratch.
-
Experience with large ERP systems (e.g., Oracle, SAP) and a strong understanding of IT General Controls (ITGCs).
-
Proven ability to communicate complex control concepts to diverse stakeholders (e.g., plant managers, engineers, traders) and drive change in a fast-paced environment.
-
Professional certification such as CIA, or CISA.