Deputy Manager, Internal Audit

The Job

• Contribute to the development of the risk-based annual audit workplan and report progress and recommendations to the Audit & Risk Committee (ARC) on a quarterly basis.
• Independently plan and execute audit engagements across business operations, procurement, project management, asset management, leases, facilities management, revenue collection, and other key functions - assessing risks, controls and compliance.
• Evaluate the adequacy and effectiveness of governance, risk management, and internal control frameworks.
• Perform audit testing and data analysis, identify control weaknesses and root causes; produce quality audit reports with practical, value-added recommendations.
• Monitor and follow up on audit findings to ensure timely implementation of corrective actions.
• Leverage data analytics and technology tools to extract and analyse data from enterprise systems, identifying trends, anomalies, and emerging risks for audit planning and fieldwork.
• For candidates with IT audit experience: assess IT governance, cybersecurity controls, systems, applications, and technology risks.
• Engage and communicate effectively with stakeholders at operational, management, and board levels.
• Support risk assessment activities, advisory engagements, and whistleblower investigations.
• Contribute to continuous improvement initiatives within the Internal Audit function and provide value-added advisory services to business units.

The Requirements

• Degree in Accountancy, Finance, Business, Information Systems or related discipline
• Professional qualifications such as CIA, ACCA, CA, CPA or CISA, ERM, CFE, BCM, or other related certifications are a plus.
• Minimum 5 years of experience in internal audit, risk management, compliance or related functions, at least 2 years in audit; background in Information System is an advantage.
• Strong understanding of governance, risk management, internal controls and audit methodologies.
• Experience with data analytical tools (Excel, SQL, Python, R, ACL, IDEA) and audit management systems (TeamMate+, AudoAudit, Pentana) is advantageous.
• IT audit, cybersecurity, fraud investigation, enterprise risk management, or business continuity management experience is a plus.
• Strong communication, stakeholder management, analytical, report-writing, and problem solving skills.
• High level of integrity, independence, and professional scepticism, strong written and spoken English, with Mandarin or Bahasa Indonesia as a plus.