Assistant Vice President, Group Internal Audit

To provide independent and objective assurance and advisory services that is designed to add value and improve the Group’s operations via systematic and disciplined approaches to evaluate and improve the effectiveness of governance, risk management and internal control processes throughout the Group.

The role provides assurance over both technology and business risks, controls, and processes across the Group. The role will also involve data-driven continuous monitoring activities, special reviews, and investigations.

Key Responsibilities:

1. Conduct and lead audits covering business, operational, regulatory and technology processes, including reviews of technology-enabled business activities, systems, applications, data governance, and related controls.
2. Evaluate the effectiveness of controls across both technology and business environments, considering the interdependencies between systems, processes, people, and data.
3. Implement a comprehensive risk-based audit plan as per the given assignments. Prepare the audit planning memorandum for each assignment which must reflect a thorough understanding of the audit scope and key processes under review, as well as the changing operational environment and its impact on corporate governance, risk management and internal controls processes.
4. Conduct audit fieldwork independently and supervise overall fieldwork execution of the team.
5. Identify control deficiencies or improvements and recommend holistic action plans after evaluating the potential gains and resources implications thereof. Communicate findings with audit clients, obtaining their agreement on the root cause of issues and committing to implementing recommendations.
6. Actively utilise data analytics tools and techniques to identify complex trends, anomalies, indicators or fraud or misconduct, and potential areas of concern across different datasets. Promote and guide others in data analytics tools and techniques.
7. Prepare the internal audit reports and highlight significant issues which warrant the attention of the key stakeholders to the Head of Department. Ensure the audit reports are concise, informative and effectively communicated to the key stakeholders by providing opinion on the adequacy and effectiveness of the areas reviewed.
8. Prepare and / or review the overall audit programs and working papers to ensure compliance with internal audit’s requirements, methodology and appropriate standards prescribed by Institute of Internal Auditors (IIA).
9. Lead the given audit assignments across the various stages of planning, fieldwork, reporting and follow-up to ensure efficient and timely completion of assignments.
10. Continue to evolve scope and perspective of audit so that it aligns with cross-functional business processes, rather than solely around discrete functions or businesses.
11. Establish and maintain effective engagement and communication with the audit clients to ensure stronger alignment in perspectives and priorities.
12. Actively participate in departmental initiatives to enhance audit methodologies, processes, and tools. Independently establish and execute initiatives under guidance of  Head of Department and drive the implementation thereof.
13. Support the establishment of a strategic plan for GIA and build upon strong relationships within the Group, continuing to position the internal control role as a valued asset.

Academic qualifications & professional certificates:

• Bachelor’s Degree in Information Technology/Systems, Computer Science, Accounting, Finance, Business Administration or any equivalent qualification.
• A minimum of 8 years’ experience in the audit function and at least 4 years as internal audit team leader.
• Exposure to technology, business, or integrated audits within the financial services industry
• Ability to assess risks and controls across both technology and non-technology environments is preferred.
• Candidates with experience or knowledge in capital markets operations, technology risk, cybersecurity, information security, IT governance, digital platforms, regulatory compliance, operational risk, and business process controls will have an added advantage.