IT Audit Specialist / Assistant manager

Responsibilities

1. Plan and conduct risk-based audits for assigned projects, delivering work within the agreed timelines and quality standards.
2. Assess the adequacy and effectiveness of IT controls, business processes, regulatory compliance, risk management, and internal controls.
3. Analyze audit findings, prepare working papers, and report results to management and the Audit Committee, with practical recommendations.
4. Advise the IT department and business unit management on IT risk management, particularly the security of applications and infrastructure, as well as internal controls supporting other business activities.
5. Perform audit work in accordance with the Global Internal Audit Standards and company guidelines.
6. Undertake other special projects as assigned.

Qualifications

1. At least 35 years old.
2. Bachelor’s degree or higher in Information Technology, Internal Auditing, Accounting, or a related field.
3. More than 10 years of internal audit experience, including more than 7 years in IT auditing.
4. Ability to assess a broad range of technologies, including software development, Windows operating systems, database management, networks, ERP systems (SAP FS-RI/B-1), firewalls, VPNs, Data Loss Prevention (DLP), IDS/IPS, web proxies, and information security.
5. Good understanding of information security standards, computer security best practices, and relevant laws and regulations.
6. Excellent interpersonal and communication skills, with the ability to communicate effectively with both technical teams and business stakeholders.
7. At least 3 years of relevant experience in the insurance industry.
8. Experience in auditing with a Big Four firm or relevant certifications, such as CISA, CIA, IAP, CPIAT, PIAC, or ISO 27001, will be an advantage.