Governance Executive, Regional APAC

This role is responsible for maintaining ISO certification through internal audits, management review, and assisting in external audits. Supporting all departments in Singapore, Malaysia and Asia region in reviewing their ISO documentation, auditable records, and Business Continuity Plans, having capabilities to identify new risks may impact business operation. Raising awareness on compliance to stakeholders.

Generic Key Performance Indicators (KPIs)
1) ISO certification maintenance and scope/site expansion (9001/14001/27001)
2) Review, update, and maintain the Integrated Management System Manual and related Procedures.
3) Assist in maintaining the Personal Data Management Program (PDMP)
4) Collaborate/projects for internal control process improvements.
5) Assist and be involved in Workplace Safety and Health and Emergency Response Team activity.

Job Description

1. Maintaining ISO certification and support in scope/site expansion.

1.1. Update yearly qualified internal auditors name list for performing internal audits.

1.2. Coordinate with relevant parties and perform an internal audit. Raise internal audit findings and CAPA when necessary.

1.3. Compiling relevant information for yearly Management Review Meeting (MRM) with top

management and relevant parties.

1.4. Coordinating external audit date and event with management and internal stakeholders.

1.5. Ensure complete follow-up action on CAPA closure (internal and external audit findings) and

perform effectiveness checks with internal and external parties.

1.6. Support project scope/site expansion project by establishing relevant documentations and

templates to the department.

2. Maintaining BCMS.

2.1. Assist in performing system verification/ testing to ensure the system's effectiveness and identify gaps. Propose, planning, implement improvement accordingly, if any.

2.2. Assist with reviewing and improving the BCP after annual testing and exercise.

2.3. Assist all departments in reviewing RAR, BIA/BCS & BU BCP. Review corporate BCP as required.

3. Conduct Quality Assurance review on new products/services.

3.1. Ensure new products/services launched meet quality standards.

3.2. Guide internal depts on cultivating a QA & Data Protection by Design (DPbD) mindset.

4. Conduct internal training and awareness training.

4.1. Organize ISO and DPTM Orientation for new onboarding employees.

4.2. Organize ISO and DPTM briefing and refresher courses to raise awareness (ISO 9001, ISO 14001,

ISO 22301).

4.3. Design and develop ISO Orientation & Quiz Program to create awareness periodically.

5. Governance IT-related tasks.

5.1. Maintain Governance Group email.

5.2. Maintain an automation system belonging to the Governance Department.

6. Workplace Safety and & Health and Emergency Response Team related tasks

6.1. Assist WSH Leader to establish and implement WSH related processes when there is new activity.

6.2. Assist WSH Leader on document reviewing process (including Safe Work Procedure, Risk

Assessment, etc.)

6.3. Oversee ERT progress and report to BCM Committee/HR Department on the attendance and

health status when the incident happened.

7. Perform as a qualified professional Internal Auditor (IA) to assist in conducting annual/ ad-hoc internal

audits.

7.1. Managing internal auditors’ performance records for BSA, BSAM, and CEC APAC.

7.2. Updating Internal Auditor name list, ensuring sufficient number of qualified internal auditors to

perform internal audits.

7.3. Ensure completeness and on-time delivery of the IA Plan, IA Annual Program, IA Review Results,

IA Checklist, and IA Report for the Head of Department/ Auditee acknowledgement.

7.4. Ensure complete review of all findings closure including but not limited to opportunity-for improvement(OFI), Observation, minor/ major non-conformances, and/ or any audit results

would necessary complete with the appropriate investigation and closure of findings.

8. Act as Document Controller for coordinating/updating/sourcing of internal and external documented

information.

8.1. Ensuring timely update of relevant approved (manual/procedures/guidelines/forms/external

document (i.e., ISO Standard)/ Certificates) into Document Master List (DML) and Document

Retention Master Log (DRML).

8.2. Consistent follow-up with respective departments to receive the latest updated and approved

document shall be included in the DML.

8.3. Conduct bi-annual reviews and meetings to highlight the key elements for improving the DML and DRML.

9. Others supporting roles.

9.1. Assist in queries regarding ISO Certification, Policies and Processes.

9.2. Collaboration to implement new/automated processes.

9.3. Involvement in the automation project. Including implementation, testing, briefing, and

maintaining the automation system to improve the current BSA Governance Process.

9.4. Involve in compliance activity as and when required.

9.5. Any other duties assigned by the Head of Department.

Must-have skills
 Possess Internal control and reasonable risk-based mindset.
 Process-oriented to perform systematic and consistent approach to monitor and review
system performances.
 Able to initiate planning/ project plans and drive new projects together with superiors and
stakeholders to achieve expected results within the targeted timeline.
 Interpersonal skills with appropriate effective English language communication and writing
skills.
 Hands-on Quality Assurance/ Quality Control experiences.
 Possess in-depth knowledge and able to interpret the ISO requirements, namely ISO 9001,
14001 and Information Security Controls.
 Required skills level – Intermediate level of using MS Excel, MS Word, MS Presentation
PowerPoint, and MS Team to conduct meetings.
 Basic knowledge to review the Business Continuity Plan and PDMP.

Professionalism conducts and work ethic
 Consistent maintaining high confidentiality and work ethic to protect and safeguard system
integrity.
 Compliance with relevant rules and regulations, legislation, corporate procedures, and
internal control processes.
 Must adhere to the principles and standards of conduct established by KMI / BSA and the
applicable legislation and regulations.
 Must act with honesty, impartiality, independence, objectivity, and confidentiality in all audit
activities and work activities.

Good-to-have skills.
 Knowledge of ISO 9001, 14001, 27001, BCMS (Business Continuity Management System),
WSH, ERT or DPTM.
 Policy writing experience.
 Auditing experience.