Risk & Internal Control Director (Hong Kong / Singapore)

This is a newly created role reporting directly to the CFO. As our Risk & Internal Control Director, you will be responsible for building the internal control framework from the ground up. You will not just be looking at traditional financial controls; your scope will extend into the operational processes that drive our revenue, our regulatory compliance, and our investor confidence. Key Responsibilities • Setup the risk registry and universal for the company which identify and evaluate major risks across the business: • Volatility in product and feedstock price • Regulatory & policy changes • Energy price fluctuations • Plant running risk and production process inefficiencies • Construction and project management risk • Environment and HSE risk • Product risk • Reputational risk • Legal and compliance risk • IT & Cybersecurity Risk • Financial Risk, etc • Maintain the Group internal control framework, ensuring it remains aligned with the COSO Integrated Framework and tailored to the operational realities of SAF business. • Define control standards and documentation requirements, including the development and maintenance of Risk-Control Matrices (RCMs) for all critical business cycles. • Support the development, design, and implementation of controls across departments to streamline key processes. • Support business unit in drafting and rolling out policies and procedures. • Support and track the resolution of compliance issues, audit findings, and control gaps. Monitor the remediation of identified control deficiencies to ensure sustainable corrective actions are taken. • Review and monitor segregation of duties (SoD) conflicts, including role design in ERP systems. • Coordinate with IT on access reviews and user provisioning controls. • Deliver internal control guidance and training; promote a strong control environment and elevate internal control awareness across the organization. • Support risk assessment and develop continuous operational control monitoring, including the tracking of Key Control Indicators (KCIs) and dashboards. • Act as the contact for internal and external auditors, ensuring the company is audit-ready for financial auditors and certification bodies. Qualifications & Experience • Comprehensive understanding of oil & gas / renewable energy sector across different operational areas. • Hands-on experience of Enterprise Risk Management in a energy sector company. • Process control expert – logical thinker and designer for business process with continuous improvement. • 10+ years of progressive experience in Internal Audit, Internal Controls, or Risk Advisory, BPR. • Bachelor’s degree in Risk Management, Energy Sector, or a related field. A Master’s degree (e.g., MBA) is an advantage. • Deep knowledge of COSO Internal Control—Integrated Framework. Experience designing RCMs, narratives, and flowcharts from scratch. • Experience with large ERP systems (e.g., Oracle, SAP) and a strong understanding of IT General Controls (ITGCs). • Proven ability to communicate complex control concepts to diverse stakeholders (e.g., plant managers, engineers, traders) and drive change in a fast-paced environment. • Professional certification such as CIA, or CISA.