The incumbent plays a pivotal role in supporting and enhancing risk management, governance, and data protection initiatives. Reporting to the Head of Reliability Matters, you will support internal control efforts by identifying gaps and providing practical recommendation, implementing control-self assessments, and leveraging data analytics for enhanced control efficiency and compliance.
Additionally, this role supports the Data Protection Officer to ensure strict compliance with data privacy regulations and managing data breach incidents effectively. This role offers the opportunity to shape the institution's risk culture and, contributing to its commitment to sustainable and reliable healthcare.
Roles and responsibilities:
Internal Controls & Compliance
- Support and execute strategies to promote a positive internal control culture across the institution, emphasizing the importance of risk management and governance, through control-self assessments and validation checks, process reviews and various stakeholders' engagement initiatives.
- Develop a deep understanding of the institution's operational functions and process workflows through continuous risk assessments and internal control testing. This include identifying control gaps, recommending opportunities for process improvements, and ensuring alignment with industry best practices.
- Collaborate with departments to build data analytics capabilities to support review and enhancing the efficiency and effectiveness of control measures.
- Perform follow-up on observations, monitor control implementation plans and provide regular updates to Senior Management.
- Participate in special reviews and projects, when required.
Data Governance & Protection
- Assist the Data Protection Officer in overseeing data protection responsibilities within the institution, ensuring strict compliance with PDPA and other relevant privacy policies and regulations.
- Assist in data protection impact assessment to ensure that data protection requirements are integrated into relevant processes and systems.
- Conduct regular walkabouts to identify gaps and provide recommendations to mitigate data protection risks.
- Assist in coordinating the Data Protection Control Self-Assessments and perform validation checks to ensure controls are consistently implemented across the institution.
- Provide support in managing data breach incidents, including investigation, reporting, and mitigation efforts, to minimize the impact on data subjects and the institution.
- Provide guidance, briefing and sharing session on data protection best practices and ensure awareness of data protection obligations among staff.
- Keep up to date on evolving data privacy regulations and industry standards, implementing necessary policy updates and process enhancements to maintain compliance.
Qualification Required and Area of Discipline
- Degree from an established university in Accountancy, ACCA or equivalent with professional certification such as Certified Internal Auditor (CIA) or Chartered Accountant (CA) is preferred.
Required Competencies and Capabilities (Skills, Experiences and Professional Licences)
- At least 6 years of proven working experience in internal controls, compliance or audit, preferably in hospital and healthcare setting
- Experience in data protection work will be an added advantage
- A strong team player with good networking and project management skills.
- Possess strong analytical mind, resourceful and able to work independently.
- Self-motivated individual with good interpersonal and communication skills.
- Proficiency in Tableau/ Power BI/ IDEA and other similar data analytical tools will be an advantage
- Knowledge of internal auditing techniques & standards, and SAP financial software preferred.