
IT Controls Manager II, Finance Systems
- Petaling Jaya, Selangor
- Tetap
- Sepenuh masa
- Develop and manage a comprehensive GRC framework aligned with industry standards and regulatory requirements.
- Conduct IT risk assessments; identify and assess IT risks, evaluate countermeasures and recommend effective controls to mitigate IT risks.
- Manage Grab Finance Systems security access and controls and the yearly User Access Review.
- Assist with the management and coordination of audits (e.g. IT SOX) and collaborate with various departments, including IT, legal, and finance, to ensure cohesive GRC practices.
- Monitor IT risks, map risk profiles and manage the IT risk register.
- Identify and implement initiatives to promote and uplift the IT Risk Management culture.
- Identify gaps in processes and make sound recommendations to stakeholders.
- Review and assess IT Implementation to ensure IT Project Governance / IT Security is adhered to the organization policies.
- Review of the results from testing and the training of a wide range of stakeholders. The governance and monitoring of financial application controls.
- Identify and support auditing needs e.g. reporting and making sense out of logs.
- Collaborate with Product and IT teams to assess and monitor data security and compliance measures based on project requirements and regional regulations.
- Perform ad-hoc independent thematic reviews on IT processes to uncover issues and follow through with the remediation action plan.
- Minimum of 8 years in managing the controls and documentation of financial applications.
- Strong understanding of IT governance frameworks and industry standards (e.g., COBIT, COSO, ITIL, ISO/IEC 27001).
- Strong experience mainly in Oracle ERP and EPM Cloud Role-Based Access Control (RBAC). Similar experience in other financial systems is required.
- Strong and deep knowledge in change/enhancement requests lifecycles e.g. configuration and development, SIT/UAT, release packaging/management within Financial ERP space.
- Ability to make sense and detect impacts e.g. if enhancements are made to a process, what other processes/data points are impacted in ERP from a Controller perspective.
- Strong communications skills with ability to build strong relationships and trust with mid-senior leaders and stakeholders across multiple departments
- Experienced in managing internal and external auditors asks for relevant finance processes and governance requirements.
- Experienced implementing SOX compliance & audit controls for financial and planning systems (e.g. Change Management, Release Management).
- Oracle Cloud Financials, Procurement Cloud and EPM.
- Knowledge of CyberArk system or other Identity Security systems.
- Professional certifications such as CISA are preferred.
- We have your back with Term Life Insurance and comprehensive Medical Insurance.
- With GrabFlex, create a benefits package that suits your needs and aspirations.
- Celebrate moments that matter in life with loved ones through Parental and Birthday leave, and give back to your communities through Love-all-Serve-all (LASA) volunteering leave
- We have a confidential Grabber Assistance Programme to guide and uplift you and your loved ones through life's challenges.
- Balancing personal commitments and life's demands are made easier with our FlexWork arrangements such as differentiated hours