Job Summary
The Information Technology Audit unit creates values by providing impactful recommendations around IT Governance, IT processes, software development process, and new emerging technologies.


Job Description

• Audit the bank and subsidiaries' information system and including IT Governance, IT processes, IT Architecture, software development process as well as emerging technologies and innovations, e.g. blockchain, machine learning, biometric authentication, and cloud computing technologies
• Assist in planning and executing audit engagements, including identifying and analyzing IT system, IT operation processes, key risks and controls; interviewing auditees; determining audit scope; evaluating control design adequacy; and testing control performance
• Develop audit programs and procedures to provide assurance the control in effectiveness
• Document audit working papers, preparing audit findings with root causes and appropriate recommendations as well as assisting team in drafting the audit reports
• Collaborate audit activities by integrating with other internal audit subject matter teams
• Give internal control advises related to IT general controls on IT processes and technologies initiatives as well as collaborating across the three lines of defense regarding business processes, technological risks, and controls

Qualification

• Bachelor's or Master’s degree in Computer Science, Computer Engineering, Information technology, Digital law or related fields
• At least 2 years’ experience in information technology audit/IT development experience of software development, software testing, and standard architectural methodologies or frameworks
• Experience of modern software development such as Agile, Lean, DevOps, and DevSecOps
• Have knowledge of cybersecurity and new technologies such as cloud services, blockchain, and AI/machine learning, CISA, CRISC, or IT/Cybersecurity related professional certificates
• Excellent critical thinking, skepticism, and problem-solving skills
• Good command in verbal and written English communication