
Senior Business Controls Manager – IT
Minor Hotels Europe and Americas
full-time
Posted on:
Location Type: Office
Location: Kuala Lumpur • Malaysia
Visit company websiteExplore more
Job Level
Tech Stack
About the role
- Provide strategic advisory on IT controls design and governance from a second line of defense perspective for major transformation programs, including but not limited to ECC → S/4HANA migration
- Ensure robust integration of SOx controls, IT General Controls (ITGC), and IT Automated Controls (ITAC) into evolving system landscapes, supporting BAT’s global risk management framework
- Lead a team of control specialists and manage third-party partners to deliver high-quality outcomes
- Serve as the primary BCT representative and subject matter expert for large-scale ERP and technology transformation programs
- Coordinate BCT activities related to IT controls advisory across multiple initiatives, ensuring alignment with governance and compliance objectives
- Act as a key liaison between program teams, BCT, and interested parties (Program Governance, Technical Leads, Process Owners, Control Owners, Internal & External Audit)
- Provide advisory on SOx controls, ITGC, and ITAC design for new systems and processes, embedding controls into design/build/test phases
- Advise on risk mitigation strategies and compliance requirements during system implementations and upgrades
- Conduct control impact assessments for major technology changes (e.g., ECC to S/4HANA), mapping existing controls and identifying gaps
- Champion automation and standardization in control design to enhance efficiency and reduce complexity
- Perform independent testing of ITGC and ITAC controls to validate design effectiveness and operational readiness
- Review evidence and documentation for completeness and accuracy, ensuring audit readiness
- Provide assurance reporting to governance committees and support external auditor reliance on management testing
- Identify control deficiencies and partner with interested parties to drive timely remediation
- Advise on controls for data migration and integration activities, ensuring validation, reconciliation, and audit readiness
- Collaborate with data and technical leads to define governance checkpoints for extraction, transformation, and loading processes
- Lead and develop a team of IT controls specialists, fostering a culture of collaboration, accountability, and continuous learning
- Manage relationships with co-source partners and external advisory firms, ensuring delivery quality and alignment with program objectives
- Negotiate scope, monitor performance, and enforce compliance with contractual obligations and BAT standards
Requirements
- Deep expertise in IT SOx controls, ITGC and ITAC frameworks across ERP environments (SAP ECC, S/4HANA preferred)
- Proven experience in large-scale technology transformation programs, with focus on controls design, risk assessment, remediation, and testing
- Strong understanding of SOx requirements, internal control frameworks, and audit standards
- Hands-on experience with SAP GRC or similar tools for security, authorizations, and SoD management
- Exceptional stakeholder engagement and communication skills; ability to influence senior leadership
- Strategic leadership capability to shape global control standards and advise governance committees
- Experience managing cross-functional teams and third-party vendors in complex global environments
- Background in Big 4 advisory or similar high-pressure transformation contexts
- Future-fit mindset: ability to drive automation, analytics, and digitalization of controls processes
- Preferred certifications: CISSP, CISM, CRISC, CIA
Benefits
- market leading annual performance bonus (subject to eligibility)
- diverse health plans
- initiatives for work-life balance
- transportation support
- flexible holiday plan with additional incentives
- online learning platforms
- personalized growth programs
Applicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills & Tools
IT SOx controlsIT General Controls (ITGC)IT Automated Controls (ITAC)controls designrisk assessmentremediationtestingdata migrationintegration activitiesaudit readiness
Soft Skills
stakeholder engagementcommunication skillsinfluence senior leadershipstrategic leadershipcollaborationaccountabilitycontinuous learningnegotiationteam managementcross-functional team management
Certifications
CISSPCISMCRISCCIA