• Reported to Global VP of Risk & Internal Audit and served as a core member of the China leadership team, bridging global strategy and local execution to empower agile risk governance and strategic decision-making • Directed holistic business analysis to shape risk strategy and audit planning; supported restructure of corporate risk profile, enabling strategic allocation of audit resources to sharpen risk oversight and drive sustainable growth • Led global engagements across commercial, finance, operations, compliance, and IT in China, APAC, Europe, and the Americas; drove remediation of critical control deficiencies and significantly reduced quantified risk exposure; partnered with multiple leaders across a matrix organization to drive sustainable operational improvements and reinforce internal controls • Stewarded end-to-end risk and compliance assurance across the enterprise; equipped senior executives with incisive compliance intelligence and mitigation strategies, instilling a culture of accountability and disciplined control throughout the organization • Championed digital transformation of audit and risk management, architecting an integrated platform of real-time dashboards, automated alerts, and predictive analytics that enabled continuous risk monitoring, streamlined audit workflows, and embedded data-driven governance into decision-making

• Established the regional Internal Audit function from the ground up (“0-1”), including organizational structure, systems, and workflows; headed a high- performing team to deliver audit and control assurance across 40+ countries; harmonized disparate local practices into a unified internal audit and control framework, securing full buy-in from regional leadership within the first year • Assessed and prioritized regional emerging risks, aligned audit strategies with corporate business objectives, and provided strategic counsel to regional and global leaders on risk stewardship and long-term business resilience • Managed full-cycle audit workflows for core business segments, including planning, execution, reporting, and corrective action tracking, to identify and address critical control gaps; delivered actionable insights that elevated assurance quality and operational rigor • Strengthened risk ownership and control accountability through policy reinforcement, team upskilling, and embedding a robust compliance culture; drove control remediations and process optimizations and reduced significant control deficiencies region-wide • Oversaw team resource planning, performance management, and talent development, cultivating a high-performance audit team and achieving 100% staff retention during my tenure

• Directed internal audit and control assurance across subsidiaries, commercial offices, and production sites in the APAC region, covering the full value chain from R&D and manufacturing to commercialization; deployed risk-based audit methodologies, assessed governance and controls, and delivered data-driven findings with actionable recommendations to senior leadership • Collaborated with Legal Compliance to deploy compliance frameworks addressing core pharmaceutical risks (anti-bribery and anti-corruption, channelmanagement, marketing, and expense controls); reinforced policy adherence through embedded controls, targeted audits and reviews, and ongoing training and culture building activities • Led multiple major fraud investigations and legal reviews from evidence collection and root cause analysis through legal risk assessment and full case closure; recovered significant misappropriated funds and implemented preventive controls and remediation measures • Leveraged US SOX expertise to strengthen the design and operating effectiveness of financial reporting controls, mitigating financial misstatement risks and ensuring full compliance with regulatory standards and corporate governance requirements

• Provided tailored risk control solutions, including enterprise risk management, internal control reviews, and compliance programs, across pharma, FMCG, and manufacturing industries; leveraged ERM, COSO, and GRC frameworks to address diverse and evolving client risk profiles • Led 10+ large-scale, high-impact engagements, managing cross- functional teams and owning end-to-end project delivery from design through implementation • Drove multiple internal audit and control outsourcing mandates, leading fieldwork, driving full- cycle remediation, and elevating client governance and control capabilities