Job Summary
The Information Technology Audit unit creates values by providing impactful recommendations around IT Governance, IT processes, software development process, and new emerging technologies.


Job Description

• Identify key risks in the bank or subsidiaries’ digital applications, e.g. security and application controls over digital channels, robotic process transformation projects, or new digital services and machine learning-related business models
• Plan and execute audit engagements, including identifying and analyzing business processes, key risks and controls; interviewing auditees; determining audit scope; evaluating control design adequacy; and testing control performance effectiveness and making evaluations which effectively achieve audit objectives
• Prepare audit working papers findings with root causes and appropriate recommendations as well as assisting team in drafting the audit reports
• Collaborate audit activities by integrating with other internal audit subject matter teams (business process audit and Information Technology audit teams etc.) to ensure appropriate and efficient audit coverage of the operational and technology risks
• Give internal control advises on relevant new digital banking initiatives as well as collaborating across the three lines of defense regarding business processes, technological risks, and controls.
• Keep up to date with new digital and technologies as well as their risks and technological concerns

Qualification

• Bachelor's or Master’s degree in Computer Science, Computer Engineering, Information technology, Digital law or related fields
• At least 4 years’ experience in information technology audit experience
• At least 2 years’ experience of the following topics: mobile banking security, APIs and microservice architectures, biometric security, machine learning, or blockchain
• Familiar with relevant banking and financial service industry knowledge and knowledge of Agile or Scrum and DevOps concepts
• Certified CISA, CRISC, or IT Security related professional certificates
• Good command in verbal and written English communication