Business Controls Manager

**BAT is evolving at pace - truly like no other organisation.**

**To achieve the ambition, we have set for ourselves, we are looking for colleagues who are ready to live our ethos every day. Come be a part of this journey**

**BAT GBS KL IS LOOKING FOR A BUSINESS CONTROL MANAGER (IT)**

**ROLE POSITIONING AND OBJECTIVES**
- Support BAT’s Risk Management & Governance Framework (SOx Compliance, testing and reporting) & project initiatives.
- Leads and manages IT SOx Design Effectiveness and Operating Effectiveness for target BAT IT processes.
- Provides IT internal control expertise, advice and guidance and promotes an awareness of risk management and control practices with BAT management.

Dimensions:
Strategy Scope: Operational Implementation / Tactical Implementation.

Reporting Level: Team Lead

Geographic Scope: Global Functional / Regional

**WHAT YOU WILL BE ACCOUNTABLE FOR**
- Support the development of the overall role of the Business Controls Team as a second line of defense within BAT.
- Ensuring all work is fully documented in line with the BCT Methodology and the SOx Testing process, reflecting current good practice in internal controls.
- Manage internal control assurance activities and ensuring certain elements of Controls Assurance work is completed in line with Auditing Standards to enable reliance from External Audit.
- Providing recommendations to improve the quality of the overall risk management and internal control practices.
- Communicate results of SOx testing to key stakeholders in a timely manner.
- Support Control Owners to develop strong remediation plans and address issues in a timely manner.
- Track and report on outstanding actions relating to SOx findings to key stakeholders and governance forums.
- Delivery of training to Control Operators and Owners to support the effectiveness of internal controls over financial reporting across the Group.
- Coordinate or participate the delivery of training to BCT staff to support the global delivery of Internal Controls services across the Group.
- Line management responsibility for outsourced partners for SOx testing, and Business Controls Team management responsibility for individual assignments (e.g., SOx testing). This includes active coaching, timely and clear feedback on their performance and development needs.
- To assist in driving the delivery of the Three Lines of Defence model an Internal Controls Framework within BAT.

**ESSENTIAL EXPERIENCE, SKILLS AND KNOWLEDGE**

**ESSENTIAL**
- Degree educated or professional Internal Controls qualification (eg. CISA, CISSP, CIA, ACCA or equivalent).
- 5+ years IT risk, internal controls or audit experience with significant accounting firm or corporate industry experience.
- Experience in global FMCG or similar dynamic operating environment is advantage.

**SKILLS**
- Effective verbal and written communication skills with the ability to articulate control issues, risk, impact, and recommendations to management.
- Good knowledge of internal controls practices, principles and procedures and corporate governance requirements for a global Group, including Internal Controls over Financial Reporting (ICoFR)
- Critical problem solving, interest in analysing business data with attention to detail
- Experience in internal or external audit, or other SOx testing of IT processes, and able to identify control gaps and provide recommendation to address the issue.
- Experience in IT Audit (internal or external), IT general Controls (ITGC) or other IT SOx testing spread across IT domains (access, program change, program development, computer operations, cyber security), and able to identify control gaps and provide recommendation to address the issue.
- Experience in reviewing outsourced IT Operations and assessing various forms of Third-Party Assurance reports, e.g., SOC reports, for adequacy and impact on the services provided is a plus.
- Controls related data analytics - in auditing context would be an advantage
- Experience with ERP systems such as SAP, and Salesforce, and GRC solutions would be a plus.
- Knowledge in data analytics/coding skills such as python, R or tools like Alteryx would be useful
- Knowledge of SOx best practice, testing and reporting approaches would be an advantage.

**WE ARE BAT**

At BAT we are committed to our Purpose of creating A Better Tomorrow. This is what drives our people and our passion for innovation. **See what is possible for you at BAT.**
- Global Top Employer with 53,000 BAT people across more than 180 markets
- Brands sold in over 200 markets, made in 44 factories in 42 countries
- Newly established Tech Hubs building world-class capabilities for innovation in 4 strategic locations
- Diversity leader in the Financial Times and International Women’s Day Best Practice winner
- Seal Award winner - one of 50 most sustainable companies

**BELONGING, ACHIEVING, TOGETHER**

Collaboration, diversity and teamwork underpin everything we do here at BAT. We know tha