Internal Audit Officer

A. Audit Planning & Risk Assessment

• Conduct preliminary review of assigned departments, processes, policies, and controls.
• Perform process walkthroughs, risk assessments, and control evaluations.
• Prepare/update the Risk and Control Matrix (RCM) and Audit Program Guide (APG).
• Review the Company's Risk Registry and identify new or emerging risks.
• Prepare audit requirements and coordinate with Department Heads and Process Owners.

B. Audit Execution

• Conduct audits in accordance with approved audit programs and procedures.
• Perform control testing, substantive testing, sampling, data analysis, and other audit procedures.
• Examine documents, records, transactions, systems, and processes to obtain sufficient audit evidence.
• Identify control weaknesses, policy/procedure deviations, process inefficiencies, and potential risks.
• Analyze audit exceptions and determine the root cause and business impact.

Maintain complete and accurate audit working papers.

C. Audit Reporting

• Prepare clear and evidence-based audit findings and recommendations.
• Ensure findings appropriately identify the condition, criteria, root cause, risk/effect, and recommendation.
• Discuss and validate findings with Process Owners and Department Heads.
• Prepare audit reports and supporting schedules within established timelines.

D. Audit Follow-Up

• Monitor management preventive action plans and corrective actions.
• Validate supporting evidence for completed actions.
• Conduct follow-up testing when necessary.
• Monitor recurring issues and escalate overdue or unresolved findings

E. Other audit-related tasks that the Audit Head may assign from time to time.

Qualifications

• Bachelor's degree in Accountancy, Internal Auditing or a business related field.
• Preferably 2–4 years of experience in Internal Audit, External Audit, Compliance, Risk Management, Internal Controls, or a related field.
• Experience in Head Office/corporate auditing is an advantage.
• Experience in retail, technology, distribution, or multi-branch operations is an advantage.

CPA, CIA, CISA, or other relevant certification is an advantage.