Apply now »

Job Title:  Business Controls Analyst - IT

Job Number:  25495

Country: Malaysia
Function: Finance
Level: Experienced Professional
Appointment Type: Permanent

Purpose Statement

Completes SOx Design and Operating Effectiveness testing in line with agreed test plans.


Undertakes Internal Controls advisory and assurance activities and report findings using structured tools and techniques to support the internal control process.


Provides internal control expertise, advice and guidance and promotes an awareness of risk management and control practices with BAT management.




Strategic scope: Operational Implementation.


Key Accountabilities


  • Support the development of the overall role of the Business Controls Team as a second line of defence within BAT.
  • Perform SOx testing and reporting to SOx Test Manager to agreed timelines (including in the space of IT processes).
  • Communicate issues noted from SOx testing to key stakeholders in a timely manner.
  • Support Control Owners to develop remediation plans and address issues in a timely manner.
  • Track and report on outstanding actions relating to SOx findings.
  • Ensuring all work is fully documented in line with the BCT Methodology and the SOx Testing process, reflecting current good practice in internal controls.
  • Certain elements of Controls Advisory and Assurance work will need to be completed in line with Audit Standards to enable reliance from External Audit.
  • Support and participate in the delivery of training to Control Operators and Owners to support the effectiveness of internal controls over financial reporting across the Group.
  • To assist in the delivery of the Three Lines of Defence model within the BAT Internal Controls Framework.


Contextual Information


i. Context




ii. Knowledge, Skills and Experience


  • Degree educated with relevant professional Internal Controls qualification (ACA, ACCA or equivalent, CIA, IIA, CISA).
  • 2-3 years, risk internal controls or audit experience with significant accounting firm or corporate industry experience.
  • Experience in global FMCG or similar dynamic operating environment.
  • An understanding of the tobacco business is preferred.
  • Good knowledge of internal controls practices, principles and procedures and corporate governance requirements for a global Group, including Internal Controls over Financial Reporting (ICoFR).
  • Understanding of Risk Management and Internal Controls best practices.
  • Experience of one or more of BAT’s core business functions, including operations, marketing, finance and IT.
  • Knowledge of SOx best practice, testing and reporting approaches.
  • Effective verbal and written communication skills with the ability to articulate control issues, risk, impact and recommendations to management.
  • Experience in IT Audit (internal or external) or other IT SOx testing spread across IT domains (access, program change, program development, computer operations, cyber security), and able to identify control gaps and provide recommendation to address the issue.
  • Experience in reviewing outsourced IT Operations and assessing various forms of Third Party Assurance reports, e.g. SOC reports, for adequacy and impact on the services provided.
  • Knowledge of BAT’s Internal Audit approach, including testing and reporting practices, and how it can be applied to Business Controls work is preferred.


iii. Working Relationship



  • Align BCT activities with the review activities of other BAT departments, e.g. other Line of Defence Teams including Compliance, EH&S, Global Security, IT Services Risks & Controls, IT Security, and Internal Audit.
  • Promotes an awareness of risk management and control practices and builds effective working relationships.
  • Provides advice, guidance and feedback in the areas of risk management and internal controls.



  • Alignment of BAT SOx testing with external audit test schedules and test plans.
  • Liaison with and management of third party SOx testing staff.


British American Tobacco is one of the world’s leading multinational companies, with brands sold in over 200 markets, made in 44 factories in 42 countries.

We are proud that we are consistently among the top 5 companies on the London Stock Exchange.

Our portfolio includes our world-famous Global Drive Brands – Dunhill, Kent, Lucky Strike, Pall Mall and Rothmans – along with many other leading international brands, such as Vogue, Peter Stuyvesant and State Express 555.

Alongside our traditional tobacco business, we are also developing products that offer consumers potentially less risky alternatives to regular cigarettes. Our Next Generation Products are already leading the way in the Industry of vapour and tobacco heating devices. We continue to develop a solid portfolio of consumer solutions which already include well known global brands like Vype, glo and Voke.

Contractual Legal Entity: BAT Aspac Svc Centre S.B. (MY51)

Apply now »