Digital Audit

Role Summary

The purpose of the Digital Audit is to assess the internal control effectiveness of digital products/services, identify areas of improvement, and ensure compliance with applicable regulations and standards. This role will provide an opportunity for auditor to demonstrate their knowledge and experience in the field of digital products/services and to contribute to the success of the organization.

Role and Responsibilities / หน้าที่ความรับผิดชอบ:

• Conduct digital audits and assess effectiveness of controls to support business processes in fast growing digital financial services.

• Prepare findings and recommendation reports to management and concerned parties for improving both financial and operational controls.

• Stay up to date with related regulatory requirements, guidelines, and best practices, and apply data analytics and other audit techniques to move toward real time assurance.

Qualifications / คุณสมบัติ:

• Bachelor’s degree or higher in IT, Computer Science, Engineering, Data Science, Statistics, Auditing, Accounting, Finance, Economics, or a related field.

• At least three years of relevant experience in Digital/IT Audit, Internal or External Audit, Technology Risk, Cybersecurity, Data Analytics, or Consulting, preferably in financial services or a regulated industry.

• Good understanding of digital financial services, technology-enabled processes, and related risks and controls.

• Strong digital and data literacy, analytical thinking, problem-solving, communication, and report-writing skills, with the ability to translate technical issues into business and risk implications.

• Ability to work independently and across multidisciplinary teams, adapt to emerging technologies and regulatory changes, and demonstrate professional curiosity, sound judgment, and a growth mindset.

Specific knowledge and skill / ความรู้เฉพาะตำแหน่ง:

• Knowledge of IT governance, technology risk, cybersecurity, data privacy, operational resilience, relevant regulations, and frameworks such as COBIT, ITIL, NIST, and ISO 27001.

• Understanding digital financial services and emerging technologies, including mobile banking, digital platforms, APIs, cloud, digital identity/biometrics, blockchain/digital assets, and AI/GenAI.

• Knowledge of cloud and third-party risk management, including shared responsibility models, data and access security, service resilience, SLA monitoring, concentration risk, and exit strategies.

• Understanding of digital fraud and regulatory Shared Responsibility requirements, including account takeover, mule accounts, transaction monitoring, customer notification, and incident response.

• Ability to apply Data Analytics, Process Mining, Automation, and AI across the internal audit lifecycle with appropriate validation and human oversight; certifications such as CISA, CISM, CISSP, CDPSE, CIA, or CRISC are advantageous.