Data Analyst Assurance

Job Summary

Potential candidates will perform technology audit related activities that include audit planning, audit fieldwork, audit review, business continuity and disaster recovery exercises audit review, and audit reporting.

Job Responsibilities

• To perform technology audit planning particularly on areas related to technology that include high risk critical systems, mandatory regulatory audit, and other areas that may affect key technology processes and systems.
• To carry out audit fieldwork specifically on technology audit assignments including pre-audit documentation, request for information, opening meeting, and audit working papers.
• To perform review practices and activities performed on technology stacks such as GitHub, SonarQube, Visual Studio, intelliJ, Android Studio, xCode, nodeJS, ReactJS, NextJS, React Native, Java, Spring Boot, Utilities, Docker, Lens (Kubernetes IDE), DBeaver, and Postman.
• To carry out review for business continuity and disaster recovery, cyber drill, crisis management plan exercises that include post test analysis report preparation, test observations and propose areas of improvements if any.
• To draft audit issues based on the review performed and get buy-ins from the relevant stakeholders for their action plan and timeline to resolve the audit issues identified.
• To prepare an audit report for the submission and deliberation to Senior Management and Board of Directors.
• Actively contribute towards audit best practices across the Internal Audit Division as part of the internal on-going improvements effort.
• Be proactive and cooperative in lending out guidance and assistance to the members of the Internal Audit Division especially on technology related areas.

Job Requirements

• Bachelors in Computer Science or related fields.
• More than 5 years of technology assurance, software development, and/or technology operations experience .
• Experienced in the general technology controls review that include access control, change management, and system infrastructure areas.
• Familiar with the concept of confidentiality, integrity, and availability (CIA) and also authorization, authentication, and non-repudiation (AAN) in order to ensure the technology environment is secure and well-protected.
• Familiar with relevant guidelines and standards that covers Financial Institutions and technology areas such as RMIT, NIST, ISO27001, and COBIT.
• Exposure to technology stacks such as GitHub, SonarQube,Visual Studio, intelliJ, Android Studio, xCode, nodeJS, ReactJS, NextJS, React Native, Java, Spring Boot, Utilities, Docker, Lens (Kubernetes IDE), DBeaver, Postman, is an advantage.
• An entrepreneurial attitude with ability to work in a fast paced, flexible environment on multiple concurrent assignments.
• Excellent interpersonal skills.
• Certification in technology audit and security related areas is a bonus e.g. CISA, CISSP, CISM.