The posting
Responsibilities:
- Assess the risks associated with a company's information technology systems, as part of statutory audit and internal audit
- Identify risk associated with the IT systems and evaluate the adequacies of existing planned responses and mitigating controls.
- Review IT control design and operating effectiveness.
- Plan and perform IT audits of financial and operating systems including system developments, databases and data management procedures.
- Extract and review datasets for analysis and audit tests.
- Develop customised audit programmes and security checklists to assess internal controls for IT risks.
- Collaborate with other engagement team members to gather necessary audit evidence and documentation.
- Prepare audit reports including audit observations and recommendations.
- Implement the risk and control framework to ensure effective risk management.
- Communicate audit findings to management and other stakeholders (Audit Committee)
Shown experience in applying learnt knowledge in the following areas:
- IT general controls review
- Application controls review
- Cybersecurity review
- Experience in performing business process audits with the aid of analytics (for e.g. IDEA, Tableu)
Job Requirements:
- Bachelor's degree / Professional degree in accountancy or information technology.
- Professional qualification of CISA is a must.
- Professional qualifications of CISSP, CISM, CIPP, CGEIT or CIA certification will be an advantage.
- At least 3 year experience in IT auditing and internal audit.
- Good knowledge of IT governance, security and risk management, including security architecture review, IT process analysis, IT application controls
- Excellent written and verbal communication skills.
- Ability to work independently and as part of a team
- Ability to handle multiple engagements and work under pressure
- Interested candidates to email resume and state expected salaries.
