---

Detail posisi

The IT Auditor will support the Head of IT Audit in conducting risk assessments, evaluating IT systems, providing independent advice, and ensuring effective communication with stakeholders.

Kewajiban

• Support Head of IT Audit in preparing the annual IT audit risk assessment by gathering IT risk assessment results along with the regulatory requirements to prepare annual IT audit plan.
• Evaluate the completeness and accuracy of IT system processing as well as security controls, reliability of information presented and use of IT systems and other IT systems of the Bank and its subsidiary company according to the approved audit plan.
• Provide independent advice on the development, implementation and operation of major IT systems to increase the effectiveness and adequacy of IT monitoring systems and enhance the security controls.
• Being Team Leader to monitor the assigned IT audit project to be completed with quality within timeline.
• Coordinate with the other relevant departments with respect to the audit activities.
• Communicate notable audit issues to the appropriate department to determine corrective action plans and make constructive recommendations that add value to audited department.
• Prepare the completeness and the accuracy of audit working papers and the draft audit report.
• Review the progress report of corrective actions identified in audit reports on monthly basis Stakeholder Relationships.
• Coordinate with the external auditors and the BOT examiner as assigned.
• Develop and maintain effective communication and engagement with internal and external stakeholders.

Kualifikasi

• At least 10 years of professional experience in External/Internal IT Audit, IT Risk, IT Security and Control and/or related fields.
• Has experience in IT general controls, application controls, automated controls and regulatory compliance.
• Has experience in information technology risk management or information technology investigation or information technology development or operation system and network system, database management, network security including other IT security control.
• Strong knowledge of banking/financial services industry particularly IT, Data, Cyber, Data Analytics, and regulatory environment.
• Knowledge of global frameworks and standards such as COBIT, NIST, ITIL, ISO27001 and IIA Standards.
• Proficient at applying risk-based internal audit standards and methods is preferred.
• A Certified Information Systems Auditor (CISA) or Certified Information Security Manager (CISM) or Certified Information Systems Security Professional (CISSP) is a plus.
• Strong knowledge in the Bank of Thailand regulation and SEC.
• Good project management skills and good communication in both Thai and English.