Vera Yang Email & Phone Number

Beijing City, China

- Perform risk and compliance evaluation in business activities, ensure current policies and standards are compliant with headquarters standards and SOX requirements.- Establish company's internal control environment and risk management regulations, formalize approval workflows, access management based on risk matrix. - Establish and standardize processes in development departments, sales departments, marketing departments etc, and build up company's“lead to cash”processes framework.- Monitor processes' maturity level by conducting budget & cost control audit, expense claim process audit etc.- Cooperate with the development team to build centralized business system to support the whole life cycle of the financial processes.

Beijing

- Establish and manage Corporate IT’s own internal control framework, IT general control framework, company level control framework to achieve Sarbanes Oxley (SOX) compliant status. - Review and analyze the effectiveness of the current internal controls and compliance with company’s policies/procedures.- Identifies potential areas of compliance vulnerability and risk, develops/implements corrective action plans or controls for resolution of problematic issues, and provides general guidance on how to avoid or deal with similar situations in the future.- Lead regular IT audit activities in China, Sweden, Japan and US, communicate the results to management, drive the implementation of the audit recommendations and findings. - Proactively communicate with control/process owner, line managers, management team, Corporate Finance Internal Control, internal auditors and third party vendors for regular risk evaluation and obtain their confirmation over the identified issues.- Act as the contact window with the external auditors, drive the regular communications in terms of audit activities planning, audit plan execution and finding communications.- Prepare and distribute compliance status reports (inc. KPI’s ), meeting minutes and compliance communications, including Newsletters, regular stakeholders forums, Steering Committees with top management team etc.- Provide effective compliance trainings, including appropriate introductory training for new employees as well as ongoing training for all employees and management as necessary. - Manage the Corporate IT compliance documentation repository.