Participate in IT audit engagements in line with the approved annual audit plan, as assigned by the Head/Team Leader of Internal Audit
Assess IT systems, IT projects, applications, and infrastructure controls to identify risks, deficiencies, and improvement opportunities
Discuss with the person in charge of the related Domain/Department about audit findings and agree on the implementation and timeline of audit recommendations
Regularly monitor and update IT-related risks to support the enhancement of risk-based audit methodology
Draft and update internal documents of the Internal Audit Department (Charter, Process, Manual/Guideline)
Participate in all training courses of the Internal Audit Department and MBAL to improve professional expertise and meet the requirements of internal audit work
Other work assigned by the Head of Internal Audit
Job Requirement
Bachelor’s degree in Accounting/Auditing, Information Technology/Cybersecurity/Information Systems, or other relevant field that is suitable for internal audit work
Minimum 2–3 years of experience in IT audit, IT risk management, IT internal control, or related security/system roles
Preferred candidates that possess professional certifications such as CISA, CISM, CISSP, ISO 27001, or equivalent
Able to read IT technical documents and communicate in English. Preferred candidates with TOEIC >600 or IELTS ≥6.0.
Proficient in MS Office; knowledge of IT systems, cybersecurity, databases, and insurance core systems; preferred with data analysis tools (SQL, Power BI, etc.).