Senior Officer - IT Audit

About the roleSenior Officer – IT Audit role focused on identifying and evaluating IT risks, developing risk-based audit plans, and assessing the design and operational effectiveness of IT controls across the organization.Key responsibilitiesIdentify and evaluate IT risks (e.g., cyber threats, AI governance, data privacy breaches)Develop a dynamic, Risk-Based IT Audit Plan aligned with the organization's strategic objectivesAssess the design and operational effectiveness of overarching IT controls, including Logical Access, Change Management, IT Operations, and System DevelopmentAudit specific automated controls within business applications to ensure data accuracy, completeness, validity, and authorization (e.g., automated calculation checks in ERP systems)Verify that IT systems comply with relevant laws and frameworks (e.g., PDPA, GDPR, ISO/IEC 27001, NIST, PCI-DSS, and industry-specific regulations)Communicate audit findings, impacts, and actionable recommendations to executive management and the Audit CommitteeFollow up on management's remediation actions to ensure risks are effectively mitigatedJob QualificationsBachelor's degree or higher in Information Technology, Computer Science, Computer Engineering or related fieldsMinimum of 2 years' experience in IT Internal AuditSolid understanding of Network Security fundamentals, Operational Technology (OT) Security concepts, Cloud Security, Third-Party & Supply Chain Risk Assessment, AI Governance & Machine Learning AuditStrong knowledge of both IA standard and IT Audit standards, IT Security frameworks, and relevant laws/regulationsExperience in testing IT controls (e.g., IT governance, cybersecurity, ISO 27001, ISO 27701, SDLC) is highly desirableProfessional certifications such as CISA, ISC2, or equivalent is an advantageFluent in English both written and verbal (Minimum 750 TOEIC score)Ability to travel/work in upcountry and abroad