Skip to content

Open nowPosted today

Business Risk Governance & Internal Control Management Manager

C+C1,161 open roles

Where
Taipei City
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowBusiness Risk Governance & Internal Control Management ManagerC+C · Taipei City
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on C+C's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.7% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 2.3%1 day
  2. 4.8%3 days
  3. 13.7%7 days
  4. 22.1%14 days
  5. 37.6%30 days
  6. 59.1%60 days
This job: posted today

The posting

Job Mission

Reporting to the Lead of Business Governance and Internal Control (ICRM lead), this role strengthens business processes and controls through risk analysis, cross-functional project delivery and hands-on Power Platform development. It combines an accounting foundation, practical risk management knowledge and business operations experience to deliver operational insights and reliable monitoring and workflow solutions.

Under the direction of the ICRM lead, the role helps operate and enhance the existing risk and control framework, strengthening operational effectiveness, accountability and the protection of company assets and reputation. It manages agreed improvement projects and acts as the Business Analyst between business users and technical teams, from requirements definition through testing, rollout and handover.

Key Responsibilities

a) Risk Analytics and Control Monitoring — 20%

- Perform recurring risk analytics and control reviews across financial and operational processes, including expenses, retail transactions, inventory and assets; investigate exceptions and assess their business implications.

- Validate data completeness, accuracy and reconciliation to source records before relying on reports or drawing conclusions; maintain clear definitions for indicators and exception rules.

- Translate the existing process and control framework into practical testing procedures, evidence requirements and monitoring routines; plan, coordinate and perform agreed control testing, self-assessments and field reviews, distinguishing isolated exceptions from recurring control weaknesses.

- Discuss findings and evidence with process and risk owners, propose proportionate improvements and track remediation to timely closure; provide practical guidance on control requirements and escalate material or unresolved matters to the ICRM lead.

b) Power Platform Development and Maintenance — 40%

- Independently design, build and maintain Power BI reports and dashboards, including Power Query transformations, data models, DAX measures, refresh arrangements and access controls.

- Develop Power Automate workflows for notifications, approvals, reminders, escalation and case tracking, with appropriate exception handling and safeguards against duplicate processing.

- Build and maintain fit-for-purpose Power Apps and integrate them with approved data sources and workflows, using SharePoint Lists, Forms and other supported Microsoft 365 services where appropriate.

- Translate business rules and control requirements into data structures, application logic and user journeys; verify calculations, workflow outcomes and access permissions before release.

- Work with Technology & Digital Solutions and relevant technical teams on approved architecture, data access, security, deployment and support arrangements; identify when a requirement needs specialist IT support.

- Document solution logic, dependencies, ownership and operating instructions; provide user training, troubleshoot issues and manage agreed enhancements after launch.

c) Process Improvement and Project Delivery — 30%

- Manage agreed cross-functional projects, defining scope, deliverables, milestones, dependencies, responsibilities and acceptance criteria with sponsors and business owners.

- Act as the Business Analyst between business users and technical teams: facilitate requirements discussions, map current and future processes, and translate needs into business requirements, user stories, business rules and functional specifications.

- Clarify data definitions, control points, exception scenarios and integration needs; work with technical teams to resolve design gaps and embed appropriate local control requirements in relevant global, regional and local initiatives.

- Maintain project plans, decision records and issue logs; coordinate stakeholders, surface resource constraints and scope changes, and obtain decisions from accountable owners.

- Plan and coordinate user acceptance testing, track defects and obtain business sign-off; support rollout, adoption and handover to named process and solution owners.

d) Governance and Risk Reporting Support — 10%

- Support enterprise risk assessments, risk indicator updates, management reporting and risk committee reviews with validated analysis, clear action status and follow-up of agreed decisions.

- Support policy lifecycle governance and internal audit coordination; help owners maintain appropriate records, approvals and evidence of action closure, and communicate relevant control requirements to office and retail teams.

- Contribute to the assessment and coordination of emerging risks and incidents, including reporting and remediation follow-up; escalate material matters to the ICRM lead and work with accountable owners and relevant specialists or Centres of Expertise (CoEs). Apply agreed priorities and align scope and ownership before committing to additional cross-functional work.

Key Requirements

Academic / Professional Qualifications / Language

- University degree in Accounting, Finance, Business Administration, or an equivalent qualification supported by relevant practical experiences. CPA, CMA or CIA qualification is an advantage.

- Fluent written and spoken English, including the ability to explain business requirements, findings and solution logic to different audiences.

Work Experience

- Minimum of ten years of relevant cross-domain experience across at least two of the following fields: accounting or finance, internal controls, business analysis, process improvement or project delivery.

- In-house industry experience is required, with direct responsibility for ongoing business processes, reporting, controls or post-implementation operations. Consulting experience is preferred and complements this requirement.

- Practical understanding of end-to-end financial and operational flows, including record-to-report, order-to-cash, procure-to-pay, inventory and asset management.

- Demonstrated hands-on development and delivery of Power BI and Power Automate solutions, plus practical Power Apps development experience. Candidates should be able to explain their own contribution, validation approach and ongoing support responsibilities.

- Experience managing cross-functional projects and serving as a business analyst on technology-enabled initiatives, from requirements definition through UAT, rollout and handover.

- Experience in multinational environments is preferred. Retail, luxury, consumer goods or other inventory- and transaction-intensive businesses are an advantage.

- Demonstrated working knowledge and practical experience with AI.

Required Competencies

- Connect data, business transactions and operational processes to identify meaningful risks and proportionate controls.

- Turn broad objectives into clear requirements, workable solutions and measurable acceptance criteria; maintain sound judgment when requirements or data are incomplete.

- Work directly with data and solution details, challenge inconsistent results and deliver reliable outputs with clear documentation.

- Listen carefully, facilitate decisions and explain technical matters in business language.

- Manage priorities and dependencies, follow through on commitments, and raise decisions or constraints early while maintaining clear ownership and scope.

- Exercise independent judgment, professional integrity and appropriate confidentiality; balance operational practicality with effective risk control.

Key stakeholders

- Internal: ICRM lead; CFO; business process, risk and policy owners; Retail and other division teams; TDS / IT and technical delivery teams; Regional / Global Risk & Internal Control; relevant CoEs; Internal Audit; risk committee, ELC and project sponsors as required.

- External: Approved implementation partners, solution providers and external auditors, as relevant to assigned work.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against C+C's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on C+C's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    C+C's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.