Head AML, Anti-Financial Crime Audit

Managing the Internal Audit Function – AFC Audit

• Formulate and roll-out the AFC audit framework and programmes within Group Internal Audit (GIA)'s respective teams, to ensure alignment and consistency with GIA's overall audit framework.
• Drive and lead the evaluation and review of the AFC Audit Risk Assessment methodology to ensure the robustness of the annual AFC audit planning process.
• Prepare the annual risk-based audit plan, manpower budget, and capital expenditure budget for Board Audit Committee's (BAC) approval.
• Develop a comprehensive analysis and robust database of all AFC-related audit issues raised by GIA to identify high risk areas or areas which are prone to have control lapses, to enable GIA to provide value-added service to and assist Senior Management to come up with sustainable remediation actions to address the lapses and to prevent recurrence.
• Proactively collaborate regularly with business management, including but not limited to Group AML Practices, Group Integrity & Governance, to keep abreast with changes made to the business' activities/processes and/or Group AML, Sanctions and ABC framework / policies or regulatory changes in AFC areas in other geographies where RHB has presence.
• Establish and/or actively participate in various AFC-related networking groups within RHB Group and other industry players to keep abreast with the evolution or emerging trends or risks in AFC-related areas.

Performing Internal Audit Services - AFC Audit

• Drive the design and implementation of AFC-specific audits conducted by the AFC audit team, including identifying and refining the audit scope and sampling approach to ensure the audit objectives are met and audit is completed within the timeline, manpower resources and cost allocated.
• Drive and lead audit discussions with AFC risk owners and control owners on issues raised, including identifying the root causes for the lapses and provide sound recommendation to remediate the lapses and address the root causes to prevent recurrence.
• Provide advice and/or recommendation to business management during the course of the AFC audits to put in place new or strengthen existing AFC controls to mitigate AFC risks.
• Drive the design and implementation of issue tracking/follow up mechanism and validation of completed remedial actions for all AFC-related issues to ensure the lapses highlighted are fully remediated.
• Establish a robust mechanism to track, monitor and report AFC-related issues in the respective governance forums and/or to regulators.
• Drive and ensure that all audit documentation in the AMS is complete, accurate and of an acceptable quality as required by GIA and with no observations raised by QAR.

Strategic Advisory – AFC Audit (as Subject Matter Expertise)

• Formulate and periodically review AFC-specific audit programmes for use by the respective audit teams within GIA.
• Strategise the execution and implementation of the AFC audits, including providing on-site and/or off-site support to audit teams within GIA to ensure the teams' audit objectives are met.
• Provide advice and/or recommendation on AFC-related issues raised by the respective audit teams to ensure that actions taken by Management to rectify and remediate these issues are adequate and sustainable to prevent recurrence.
• Continuously formulate, drive and build internal AFC capabilities in GIA through formal or informal learning / training / secondment initiatives.
• Drive the design and implementation of adhoc audits or validation activities on AFC-related areas, as and when requested by Management, Board Audit Committee or regulators.
• Provide credible challenge and collaborate with, including but not limited to Group AML Practices, Group Integrity & Governance, and/or other internal or external stakeholders on AFC-related matters to ensure adequate controls are put in place to comply with regulatory requirements.
• Attend and actively participate in AFC-related working groups and governance forums to provide input, particularly on AFC controls, to ensure that any gaps are addressed before the initiatives / enhancements are presented to Senior Management for endorsement / approval.