IT Auditor
Description
This role is responsible for planning, conducting, reporting, and following up Information Security Management System (ISMS), IT Service Management System (ITSMS), and other applicable IT-related management system audits in accordance with relevant standards, accreditation requirements, and procedures.
Key Responsibilities
- Plan, prepare, and conduct IT Management System audits in accordance with applicable certification requirements, ISO 19011, company procedures, and professional auditing standards.
- Prepare and submit audit programs through iCert, including coordinating audit arrangements and reviewing relevant client information.
- Collect, verify, and evaluate objective evidence to assess conformity with applicable standards and certification requirements.
- Identify, document, and communicate audit findings, including nonconformities and opportunities for improvement.
- Review and follow up on corrective actions submitted by clients to verify effective resolution of audit findings.
- Prepare accurate, complete, and timely audit reports, including recommendations related to certification activities.
- Support report review activities when assigned, ensuring audit documentation is technically complete and compliant with applicable requirements
Key Requirements
- Bachelor’s degree in Computer Science, Information System, Information Technology, or another relevant discipline
- Minimum 2 years of professional experience in Information Technology with exposure in IT Security
- Having knowledge and familiarity in implementation of ISMS ISO/IEC 27001:2022 standard
- Having knowledge and familiarity in implementation of general management system auditing technique based on ISO19011
- Practical experience with ISO 27001 is preferred
- Certified as a Lead Auditor certificates from an accredited international organization (such as IRCA, PECB, Exemplar Global or equivalent) is preferred