Chee Yeeng Ng

• Review Technology Division’s internal operations current controls/processes. • Propose and strategize areas of improvement with the aim to minimize technology related risks by tightening current internal controls, realign current operations practice with best practice. • To understand and cross check Technology Division SOPs with Regulatory Policies Requirements. • Facilitates and supports Technology Division related review (internal & external). • Tracks and reports gap/action plans until closure. • Support management through risk identification (e.g. RCSA (Risk Control Self Assessment), KRI(Key Risk Indicator)), controls testing (e.g. CSA (Control Self Assessment)) and process improvement procedures. • Participate in review and update compliance procedures and internal controls.

• Provide IT compliance oversight. • Work with company's internal & external auditors to ensure continued compliance with requirements and internal control standards, serving as central point of data gathering. • Support management through risk identification (e.g. RCSA (Risk Control Self Assessment), KRI(Key Risk Indicator)), controls testing (e.g. CSA (Control Self Assessment)) and process improvement procedures. • Participate on develop, review and update compliance procedures and internal controls. • Establish and manage monthly GRC (Governance, Risk and Controls) performance scorecard and derive data collected into internal controls procedure. • Facilitate, coordinate and arrange weekly Change Request Committee (CRC) Meeting with change request (CR) submission by Change Owner. • Be a first gate controller on the CR submission. • Enhance and simply the change management flow based on ITIL standard to increase operation productivity. • Dealing with vendor on Change Management System or features enhancement.

Report directly to Chief Internal Audit (CIA) and provide guidance or mentorship to new joiner based on COSO Framework. Assisted CIA on yearly audit programs planning. Proposed and create audit test cases. Conducted business data analysis, risk-based audit, ITGC audit, operational and compliance audit. Experienced joint field audit with joint venture auditors (e.g. VOPAK, MISC, PETRONAS - Carigali, and etc). For any oversea operation audit and compliance, I was assigned to travel our subsidiaries in New Zealand, Indonesia, Singapore, and Thailand.

A Business Analyst in ERP project. Responsible to gather user requirements of respective business unit e.g. Procurement, Sales & Marketing, Contract and Finance. Conduct business analysis and transform the business logic into system functions. Prepared RFQ (Request For Quotation) requirements, process workflow in the user compliance matrix for the bidder evaluation. Act as communication channel between internal users and external vendor. Prepare User Acceptance Test (UAT) and signed off at every stages of implementation. Achievements and Experience • Define project objective and scope. • Perform gap analysis and and impact analysis. Subsequence, proposed solutions to close and minimize the gap. • Conduct stakeholder requirements and converted requirements to functional specifications and further prepared business requirement documents e.g. Process workflow diagram, user compliance matrix, etc. • Managed formal and informal requirements analysis meeting. • Working as a bridge between the business and IT, transform the business’s requirements into the form that can be understood by the system consultant or developers.

• Successfully developed and implement a business web-portal. • Responsible to conduct detailed interviews with business users, converted requirements into functional specifications. Created workflow diagrams between various actors and the system. • Recognize process improvement opportunities. • Develop and program, maintain and support the new and existing system or website.