BAT is evolving at pace into a global multi-category business. We are on a mission to decrease the health impact of our industry
To achieve our ambition, we are looking for colleagues who are ready to Be The Change. Come, join us on this journey!
British American Tobacco has an exciting opportunity for a Business Controls Manager – IT in Subang Jaya, Selangor.
Focus Area: IT
Reports To: Senior Business Controls Manager
Grade: G35
Function: Finance
Sub Function: Business Controls Team (BCT)
Purpose:
- Works closely with BAT Management to assist with the design and effective operation of internal controls across financial & non-financial reporting, compliance, and operational areas.
- Manages Internal Controls Design activity for both Business as Usual (BAU) and Project or Programme related control changes.
- Offers expertise in Internal Controls, providing advice and mentorship while promoting an awareness of risk management and standard methodologies across the BAT Group.
Dimensions:
- Reporting Level: Manage Self or Manager of Others (including acting as “project” assignment Lead)
- Geographic Scope: Global Functional/Regional
- Professional Expertise: 4+ years IT Risk and Controls, strong financial/IT controls knowledge and SOX experience
Your key responsibilities will include:
Controls assurance - SOx
- Adhere to BAT’s SOx programme methodology and make sure it is kept current with standard methodology (SEC, PCAOB and Big Four guidelines).
- Manage the planning, scoping and risk assessment for BAT’s global SOx programme.
- Manage the execution of Management SOx testing across key business processes, functions and geographies.
- Project managing a team of colleagues from the Business Controls Team and BAT’s co-source Partner of 2-15 at any time (local and / or across multiple geographies) – including activity assignment, delegation, on the job guidance, monitoring and review.
- Project managing BAT’s co-source partner – including monitoring of actual work vs. budget and performing quality assurance reviews.
- Lead all aspects of SOx design and operating efficiency testing, adhering to testing schedules, and detailed documentation.
- Business partner with management from across BAT to support remediation of control issues, including designing practical and proportionate solutions to remediate deficiencies or gaps in control.
- Prepare concise, relevant reporting of status, results and key findings for BAT Management and Governance forums inc. Business unit risk committees, Regional Finance Leadership Teams, , Regional and Plc Audit Committees.
- Maintain on-going communication with BAT’s external auditors including alignment on controls audit planning, walkthroughs/testing, audit requests, and deficiency evaluation.
Controls assurance – other
- Manage internal controls monitoring & assurance across ICFR and other risk domains through the management controls self-assessment (Control Navigator), the year-end management internal controls sign off (ICSO) and the immediately reportable incidents process (IRIs).
- Support in the monitoring and resolution of all reported control issues and identified actions.
- Undertake incident reviews, including root cause analysis and assessing the adequacy of actions to address identified control issues or gaps.
- Align assurance activities with other 2LD and 3LD assurance providers (e.g. various compliance teams, Cyber, Security, Internal Audit)
Controls framework
- Assist the review and update BAT’s internal control framework and assurance model.
Controls advisory
- Assist in providing internal controls design expertise to support business process, system or service organisation changes including:
- Process mapping
- identification and ranking of risks
- design of practical controls and supporting operating procedures, templates, guidance
- identification of opportunities to optimise controls through automation, standardisation and centralisation.
- Develop and deliver controls training.
- Develop controls templates / guidance including control operating procedures and documentation standards and embed these across the business.
- Work with BAT management to ensure controls are embedded.
Business partnering
- Build relationships with collaborators like Business unit Controllers, Senior Managers, and Compliance Managers. Hold regular progress meetings and address issues promptly.
People management
- Line management responsibility for Business Controls Analysts on BAU work and Project Team management responsibility for individual assignments, including:
- setting clear, measurable objectives,
- effective delegation,
- providing on the job coaching and guidance,
- timely, clear and balanced feedback on their performance and development needs.
What are we looking for?
Context/ Environment
- Degree educated with relevant professional qualification (e.g. ACA, ACCA, CISA, ITIL, CGEIT or CISSP)
- 4 years+ IT risk and controls experience with significant accounting firm or a global FMCG or similar dynamic operating corporate environment.
- Experience of IT internal controls in a SOx environment.
- Experience engaging with external auditors.
- Good knowledge of internal controls practices, principles and procedures and corporate governance requirements for a global Group, including Internal Controls over Financial Reporting (ICoFR)
Knowledge, Skills and Experience
- Experience in reviewing core IT processes and assessing the adequacy of controls, including design and operating effectiveness.
- Experience in reviewing outsourced IT Operations and assessing various forms of Third Party Assurance reports, e.g. SOC reports, for adequacy and impact on the services provided.
- Experience in describing technical IT/SAP system situations into non-technical business scenarios and risks for senior management.
- Experience in use of SAP GRC and other automation tools for controls monitoring
- Effective verbal and written communication skills with the ability to describe technical IT scenarios to senior executives to enable understanding of risks and the impact of controls over those risks and processes.
- Strong interpersonal skills and the ability to influence key decision makers to ensure risks and control scenarios are fully understood.
- Experience in managing diverse teams as part of both business as usual and one-off project work.
- Good project management skills.
- Experience in managing teams and people development.
- Experience of working on projects and new / change initiatives.
- Continuous improvement: Stay informed on industry trends and standard methodologies in controls, compliance, and risk management to lead continuous improvement efforts.
Working relationship:
Internal
- Align BCT activities with the review activities of other BAT departments, e.g. other 2LD teams including Compliance, EH&S, Global Security, IT Security, and Internal Audit.
- Business unit managers – promote an awareness of risk management and control practices and builds effective working relationships.
- Project Management & Change programmes – provide expert advice, guidance and feedback in the areas of risk management and internal controls.
External
- External Auditors – respond to queries and requests for information and support the external audit activity.
What we offer you?
• We offer a market leading annual performance bonus (subject to eligibility)
• Our range of benefits varies by country and includes diverse health plans, initiatives for work-life balance, transportation support, and a flexible holiday plan with additional incentives
• Your journey with us isn't limited by boundaries; it's propelled by your aspirations. Join us at BAT and become a part of an environment that thrives on internal advancement, where your career progression isn't just a statement – it's a reality we're eager to build together. Seize the opportunity and own your development; your next chapter starts here.
• You'll have access to online learning platforms and personalized growth programs to nurture your leadership skills
• We prioritise continuous improvement within a transformative environment, preparing for ongoing changes
WHY JOIN BAT?
We’re one of the few companies named as a Global Top Employer by the Top Employers Institute – certified in offering excellent employee conditions.
At BAT, we champion collaboration, inclusion, and partnership as the bedrock of our values. We wish to foster an environment where every individual can thrive, irrespective of factors such as gender, sexual orientation, marital or civil partnership status, gender reassignment, race, religion or belief, colour, nationality, ethnic or national origin, disability, age, skills, experience, education, socio-economic and professional background, as well as diverse perspectives and thinking styles. We recognise that our strength lies in embracing talent from all walks of life, empowering us to develop our culture of inclusivity and better achieve our business objectives.
We view career breaks not as obstacles but as opportunities and encourage everyone, without hesitation, to apply. Through our Global Returners program, we provide support to professionals seeking to re-enter the workforce after an extended absence, be it for family care, parental leave, national service, sabbatical, or starting their own venture.
Come bring your difference and see what is possible for you at BAT. Learn more about our culture and our award winning employee experience here.
We take pride in being a Disability Confident Employer. If you need any reasonable adjustments or accommodations to be made during the recruitment process to support you performing at your best, please inform the recruitment partner who will be in touch should your profile be selected for the role you applied for. We are wholeheartedly committed to optimising your prospects of success by making suitable arrangements so that you may showcase your full potential.
