CON CƯNG ★ 3.2

Strengthen and build risk management practice:
- Facilitate continuous identification and periodic assessment of business risks in the operating environment and update the risk registers.
- Developing and executing internal control activities, consult with management on strategic plans and other business matters, and anticipate emerging risks.
- Stay abreast of industry trends and changing regulatory guidelines to enable the development and implementation of appropriate control measures and monitoring mechanism as well as their continuous update/revision.
- Apply a rigorous and efficient risk-based audit approach which delivers robust assurance on the effectiveness of risk management and control measures.
- Monitor and report on key risk indicators (KRIs) and implementation of risk mitigation strategies.
- Ensure appropriate level of communication is maintained on Internal Control matters to support the framework and ensure appropriate ownership and accountabilities from management and managers.
- Maintain the whistleblowing channels of the Company and provide periodic reports to the Board.
- Report to the Audit Committee of the Board of Directors regarding internal control matters, results of audit reviews, the progression of audit plan and any other matters of discussion.

Maintain and execute risk management practice.
- Prepare Internal Audit and Control plans and provide oversight and direction in the execution and reporting of internal Control engagements and projects within established timelines and budgets.
- Conduct periodic financial, compliance, operational and special audits and carry out investigations into reported irregularities, as required.
- Conduct follow-up reviews of financial, operational, or regulatory compliance deficiencies noted during audits.
- Review analyses of non-conformities, discuss audit findings across the organization and suggest recommendations.
- Documenting and testing business process and IT controls that support key operations.
- Evaluating control deficiencies, and monitoring remediation actions, timelines, and progress.
- Proactively inform senior management of significant risks or exposures related to internal controls, compliance, and/or governance requiring prompt attention.
- Prepares monthly exception reports and presents to the management.
- Deliver insights that are highly valued, identify root causes, share best practices and lead to business improvement.
- Conduct investigations on reported cases of fraud and misconduct and prepare investigation
reports.
- Flexibility to carry out any other task as requested by CFO