IT Auditor
Responsible for conducting Information Technology Audits (IT Audits) to evaluate the adequacy and effectiveness of IT internal controls and assess technology-related risks across the Company and its subsidiaries.
The role covers the end-to-end audit process, including understanding business processes and information systems, performing control testing, assessing risks and impacts, communicating audit findings, recommending improvements, and following up on agreed corrective actions.
Key Responsibilities
Conduct IT Audits in accordance with the audit plan and applicable internal audit professional standards.
Review and evaluate IT General Controls (ITGC) and Application Controls to assess the adequacy and effectiveness of IT internal controls.
Understand business processes, IT systems, organizational structures, and operating procedures of audited functions to identify relevant risks and control areas.
Perform audit procedures and control testing through interviews, sampling, observation, physical inspection, document review, and other appropriate audit techniques.
Analyze audit findings and assess associated risks and business impacts, and promptly escalate significant issues or potential fraud indicators to management.
Review compliance with internal policies, procedures, Delegation of Authority, operating manuals, and applicable laws and regulations.
Discuss preliminary audit findings with auditees and communicate identified issues and areas for improvement.
Prepare audit reports, including observations, recommendations, and proposed improvements to internal controls.
Follow up on agreed corrective actions and maintain appropriate audit follow-up documentation.
Keep up to date with professional standards, laws, regulations, and relevant IT and business information to support effective audit execution.
Qualifications
Bachelor’s degree or higher in Information Technology, Computer Science, Information Systems, Accounting, Finance, or a related field.
3–5 years of experience in IT Audit, IT Risk, IT Internal Control, or IT Governance.
Hands-on knowledge and experience in IT General Controls (ITGC) and Application Controls.
Good understanding of IT Risk Assessment, Internal Controls, and Business Processes.
Familiarity with enterprise information systems such as ERP, financial/accounting systems, or other business applications.
Knowledge of relevant IT audit and IT governance standards or frameworks.
Ability to independently perform audit procedures, analyze findings, assess potential impacts, and prepare audit reports and practical recommendations.
Strong communication and coordination skills with the ability to discuss audit findings with relevant stakeholders.
CISA, CIA, or other relevant professional certifications would be an advantage.
Experience in Internal Audit within a large organization/listed company or External IT Audit/Big 4 would be an advantage.