Suntory Pepsico ★ 3.9

Job Summary:

This position is responsible in leading the internal control and risk management agenda for PepsiCo Vietnam to build a strong internal control and risk management framework, increase Global Control Standard (GCS) awareness and ensure compliance to current law, regulation, PepsiCo policies & procedures.


Key accountabilities:

1.Control and Compliance – GCS and SOX (if any):

- To facilitate implementation and sustainment of the PepsiCo Internal Controls Framework (GCS4.0) and strengthen proportional ownership within the market unit
- To develop GCS training materials, conduct GCS and related policies training as well as Control Capability Self-Assessment (CCSA) on an annual basis based on GCS4.0
- To facilitate risk assessment including fraud risk assessment with cross-functional/relevant stakeholders/functions/Global team for new implementation (e.g., system implementation, Greenfield), new and existing processes, prepare the minute timely and follow up the action plans.
- To prepare GCS test plan including independent testing plan, coordinate with GCS Portal Admin to schedule testing in GCS portal, ensure testing is timely executed and results are shared with management
- To coordinate between the business, PwC and Sector to ensure timely remediation of control deficiencies
Partner with Project team to implement Data Retention Policy and Schedule, data classification, data breach escalation as well as drive compliance with local data privacy law
- To act as a point of contact for the corporate audit team, external auditors, tax authorities and coordinate with the business to support the audit requirement as well as prepare audit remediation tracker and follow up with action owners
- To provide advisory to the business related to GCS and related policies
- To prepare quarterly GCS report with clear root cause analysis, proper description of deficiency, timely communicate failures to process owners and control owners and ensure timely remediation
- To perform the independent testing to evaluate control effectiveness and recommend for improvement
- To drive the strong governance over legacy systems


2.Enterprise Risk Management (ERM)/ Non-routine risk assessment:

- Act as Risk Governance Lead and strengthen non-routine risk assessment process in Vietnam; provide ERM training including emerging risks to key management
- To Schedule Audit and Risk Committee meetings, prepare and circulate pre-read, facilitate discussions and record minutes/actions

3.Automation and Simplification:

- To drive Automation and Simplification to business process and controls to create productivity
- To benchmark risks and process controls across different markets and continue to streamline

4.Documentation:

- To maintain supporting documents for self-testing, independent testing, and self-assessment evidence in local repository for audit trial and retain the documentation based on local document retention requirements
- To coordinate with business to conduct periodic review of GCS documents to ensure the up-to-date of GCS documents (Business process standard operating procedures, flowchart, Test script, Risk Mitigation Matrix)

5.Others:

- To maintain an up-to-date Schedule of Authority
- To evaluate and provide constructive feedbacks on internal policies and procedures
- To participate ad-hoc taskforce as required e.g., system implementation, specific assignment etc.