Senior Internal Auditor (IT)

The nature of our business relies heavily on technology, which requires IT-related risks to be managed adequately to safeguard information. The holding company’s audit team supports the audit for the group, and we are looking for a dedicated, passionate, and highly driven individual to join our team to focus on the following:

Roles and Responsibilities:

• Assist in updating the existing IT audit universe via an understanding of the software development and IT infrastructure.
• Conduct audit, not limited to evaluation of software development, systems security controls, user access reviews, network and system vulnerabilities/application/datacentre assessments, business continuity testing, and IT disaster recovery plans against leading practices, frameworks, and common standards (e.g., CoBIT, ITIL, ISO 27001/02).
• Perform the test of controls (where applicable), document the result of the test of controls and validate exceptions identified with auditees.
• Lead exit meetings to discuss audit findings and recommendations with the auditees. Prepare a report on the identified findings in the internal audit report.
• Follow up on open audit findings with auditees for timely resolution/rectification actions.
• Conduct ad-hoc tasks/activities to support the functions of the department as and when needed.

Requirements:

• At least 4 years of full-time work experience in information security management and/or related functions (such as IT audit and IT Risk Management).
• Understanding of business processes (e.g., Finance/Accounting, Procurement, Sales, etc.).
• Degree in Information Systems or Technology (IT), Computer Science or other related disciplines with relevant experience in managing cyber risk in financial market infrastructures.
• Knowledge of business and accounting information systems (Accounting, Billing, Payroll, ERP systems such as SAP, Oracle, etc.).
• Professional certification such as CISM, CISA, CSXP, CISSP, CREST, CDCP, GPEN or equivalent is desirable but not compulsory.
• Advanced Ms Office skills especially in Excel and PowerPoint.
• Excellent business writing and verbal communication skills in English.
• Experience in the financial industry is an added advantage.