Why does this job exist and why is it critical?


You'll be assisting Internal Audit team in effectively discharging its responsibilities (as stipulated in the Internal Audit Charter) in evaluating risk exposures, and the adequacy and effectiveness of controls regarding the operations and activities in Information Technology and Network environment.

What are you accountable for?

Plan and perform IT & Cybersecurity related audits and advisory assignments to identify key control issues which impact business (revenue, reputation) and customer service domains.

Assist in the evaluation of potential occurrence of fraud (in business) and how Management manages / mitigates the risk.

Assess whether the key business processes governing the Business Units support the Organization's strategies and objectives.

Prepare audit reports to communicate audit results to Senior Management and the Audit Committee.

Prepare and maintain audit/advisory work papers and perform timely update in the audit management system

Monitor and track implementation of audit recommendations / management's actions in mitigating risks associated with the control issues.

Provide input to the development of the Annual Audit Plan to cover high risks areas (e.g. fraud, high value products) in audit review so that controls over the critical processes / systems / projects are effective to mitigate risks.

Collaborate with Management i.e. 2nd line of defence to develop and implement key control checklist.

Working closely and build relationship with Stakeholders

Providing consultative advice to Stakeholders by identifying and being vigilant about key control gaps or risks related to key processes and financial items in the Business Unit / Organization.

What do you need to have for this role?

Bachelor Degree in IT/Engineering/ Computer Science

At least 7 to 10 years in IT audit/telco engineering

Skills/Knowledge required: IT/telco engineering knowledge, auditing experience, business report writing skill, data analytics and presentation skills.