Deskripsi pekerjaan
- Perform the required IT audits of the organization as an individual or working in a team, following both established department standards and the Standards for the Professional Practice of Internal Audit established by the IIA.
- Prepare detailed audit program and execute IT audits and Integrated audits through applying risk-based auditing skills, usage of data analytics and professional judgement.
- Perform IT general and application controls review leveraging on strong technical knowledge of various technology applications, operating systems, databases, network and infrastructure to evaluate controls design and operating effectiveness.
- Develop relevant scripts/ scenario/ analysis objectives and perform data analysis to identify trends and behaviour of businesses.
- Communicate in formal audit report writing, the root causes of identified issues, associated risks, recommendations for improvements and ensure corrective action plans are properly implemented by management.
- Works closely with unit managers to devise specific technology related audit tests to evaluate the adequacy of controls.
- Responsible for staying current on regulatory requirements and technological changes within the industry.
- Lead the development of training programs to ensure adoption of new procedures designed to mitigate IT risks.
- Review audit reports by other auditors from each company to ensure necessary risk management and mitigations being implemented timely and effectively.
- Follow up on remediation plan and deficiency for closure.
- Degree in Information Technology, Computer Engineering, Computer Science, Information System Audit or Management Information Systems.
- Having a certification in the field of IT Audit, IT Security and/or Audit is an advantage, such as CISA, CISM, CIA, CFE.
- Have experience in performing penetration testing is an advantage.
- Strong understanding and knowledge of business risks related to IT system general controls, systems or applications development, change management, logical access security, network, contingency and recovery.
- Strong risk, internal controls, and IT controls awareness.
- Knowledge in IT audits, including planning (preparation of risk and controls matrix, test plan, list of questions and list of requests), execution of walkthroughs and operating effectiveness tests.
- Strong presentation, verbal and written communication, and interviewing skills.
- Knowledge of technology controls frameworks such as COSO, COBIT, ISO 27001 and/or NIST.
- Ability to understand process flows, challenge the set up and identify weaknesses.
- Technical knowledge in areas such as Windows and UNIX environments, network security, infrastructure, SQL, microservices, Cyber Security and Cloud computing.
- Good English verbal and written communication skills.
- Hybrid working (working from home and working from office).
- 5-7 years of experience in information security, IT practitioner in industry, internal audit or external audit in public accounting firm.
- At least 3 years of experience in a team management function (managerial).
- Have basic knowledge of Windows and Linux operating system, databases (MongoDB, PostGreSQL), HashMicro ERP system, digital signature implementation.
- Have experience and basic knowledge in performing data analytics using data analytics tools, such as: Metabase, Tableau, AirFlow.
- Possess a good analytical thinking and logical thinking, have a positive attitude, fast learner, self-motivated and the ability to work pro-actively alone or as part of team.
- The ability to multi-task with little supervision, deal with competing priorities, and agility to work within a fast paced, ever-changing business and risk landscape
- Strong analytical and persuasive skills and ability to communicate to all levels of Management.
- Willing to join immediately.
- Able to travel domestically up to 20% of the calendar year.
