Governance, Risk and Compliance Executive

Responsibilities Compliance & Governance Act as the sole compliance contact​ for Malaysia Supporting the Compliance Office in relevant group-wide Compliance activities e.g. conduct Internal Audits, act as main contact person for ICS in Malaysia and cover Information Security topics. Ensure adherence to Group Compliance Policies, including anti-corruption, code of conduct, and trade compliance. Liaise with HQ CG&C Department​ for guidance, reporting, and escalation. Monitor regularly changes in Malaysian regulatory requirements​ and assess impact on local operations. Internal Control System Design, implement, and maintain the Internal Control System​ for the Malaysia plant in accordance with German HQ standards. Perform regular risk assessments​ and improve/develop control matrices​ covering operations, finance, procurement, supply chain, production and HR. Conduct process walkthroughs, identify control gaps, and drive remediation plans. Independently conducting and supporting the ongoing analysis of the risk control environment for key business processes, updating control documentation in collaboration with the ICS team, process and control owners. Audit/monitor the LMW performance, including records accuracy, license condition compliance, export control and bonded inventory reconciliations. Independent quality assurance of test results; Support internal audit readiness​ and coordinate with external auditors when required. Information Security Support the InfoSec area in the ongoing development of AIXTRON´s group-wide Information Security Management System (ISMS) Identify and evaluate legal, regulatory and internal requirements as well as risks and trends with general impact to the ISMS, specifically to organizational, physical, human and IT information security. Define and implementing resulting measures, monitoring implementation and ensuring effectiveness Transfer the content of AIXTRON´s ISMS strategy into strategic and operational objectives including the implementation of related measures; Implement and oversee InfoSec Policies, procedures and controls​ in alignment with HQ Information Security frameworks. Support & manage the organization and carrying out internal audits of our ISMS System. Define remediation plans and support the responsible organization during the implementation Design and implement local breach notification processes. Lead local incident response, solution and execution. Stakeholder Engagement Partner with Finance, IT, HR, Legal, and Operations to embed compliance into business processes. Provide training and awareness programs​ on ICS, ethics, and compliance topics. Serve as the trusted advisor to the Malaysia leadership team. Qualifications and Skills Required Bachelor’s degree in accounting, Finance, Business, Information Systems, or related field. Professional certifications in accounting, auditing or information security are preferred, 8+ years​ in internal control, internal audit, Information Security or compliance roles in manufacturing or semiconductor industries Exposure to multinational companies​ with matrix reporting to HQ functions. Strong understanding of ICS frameworks, risk management, and audit methodologies. Familiarity with information security principles​ and cybersecurity controls. Experience and knowledge about LMW is an advantage. High integrity, independent mindset, and ability to challenge constructively. Fluent in English; Bahasa Malaysia and Mandarin proficiency is a plus. Working Conditions & Environment · Role based at AIXTRON Malaysia Sdn. Bhd. · Majority of the work is at Batu Kawan site; work at Kulim site will be requested as needed. Visits to warehouses, key suppliers, government authorities (e.g., MIDA, PDP Department) for licensing and compliance matters. will be requested as needed. · Occasional travel, to Headquarters in Germany or other regional sites.