- Responsible to assist
the Head of Internal Audit (“HOIA”) to develop, execute and manage the internal
audit plan to provide independent and objective IT/ Technical audit assurance
(telco technology & network; and fintech driven), investigations and other
ad-hoc assignments to achieve the Internal Audit’s Charter objectives, and to
ensure that review work conforms to the professional standards for Internal
Auditing promulgated by the Institute of Internal Auditors.
and contribute to the development of IT/Technical Internal Audit Plan
(telco technology & network; and fintech driven), identifying and
maintaining the completeness of audit universe, including proactively
identify and evaluate emerging risks that may have an impact to the
completeness/ adequacy of the audit universe/audit plan.
the Board Audit Committee approved IT/Technical Internal Audit Plan to
ensure adequate completion within the timing/budget, resources, scope,
objectives, reporting and work quality.
- Prepares and discusses clear
and concise draft / final reports with the HOIA and subsequently with the
audit client/ Management at the conclusion of audits and recommends
solutions required to minimise exposures arising from control/other
deficiencies or to optimise effectiveness/ efficiency of area reviewed. At
the conclusion of audit assignment, ensure that timely closure of audit
file and update of assignment tracking.
- Perform, and as and when
required to supervise concurrent planned and/or systems studies,
investigations and ad-hoc/special projects as directed by the
HOIA/Supervising Manager to ensure adequacy of coverage, quality, and
timely reporting (including escalation of critical issues before report
the HOIA to manage resource availability to support ad-hoc audit reviews
while managing planned assignments according to the approved annual audit
plan.As the assignment Team Leader/
Supervising Manager, provides on the job training/coaching to audit staffs
according to the established technical and reporting standards approved by
the HOIA, and to perform quality control review by reviewing work done by
individual teams to ensure that work performed conform to expected
technical and reporting standards.
- Perform follow-up reviews with
audit clients/ Management to ensure timely implementation of the agreed
remedial measures and ensuring that relevant supporting documents/ records
are obtained and maintained timely to support the status of completion of
outstanding audit recommendations.
- Assist to promote and
elevate the use of data analytics within IA works and drive data strategy and
efficiency. This includes identifying, design, implement, and maintaining the
data analytics techniques and data analytics routines needed to support audit
activities performed including both audit execution and continuous auditing.
Proactively establish connections with key data owners and help IA build and
understand metadata to support the data analytics activities performed by IA.
professional conduct and to develop and maintain respectful stakeholders'
relationships with the Audit Committee, business units and senior
management, including keeping abreast with the strategic business
direction.Support the review of Policies
& Procedures and provision of internal control consultation when
and suggest value-added improvements to IA processes/ team development (e.g. IT audit policies and guidelines in line with
department strategy to support audit process management, quality of
deliverables and continuous improvement in terms of audit techniques and
use of technology-based tools), and to assist HOIA in ensuring that
annually established departmental goals (monitored as Key Performance
Indicators) and projects are met.
organizational and professional ethical standards through compliance to IA
policies and procedures. Keep abreast with the changes/update to the
approved Internal Audit Manual/prevailing working template and apply the
same when performing the audit work.
a programme for on-going self-development. Plan the development of
personal competencies in line with the skills required for the IA.
Continuously seeking opportunities for keeping up to date. Actively plan
to become certified in internal audit or get certified in specialties.
perform any other tasks as instructed by the Head of IA.
- Degree in Information
Technology, Computer Science, Bachelor of Engineering in Electronics &
Telecommunication, Data Science, Information
Systems, Mathematics, Statistics, or related disciplines.
- Professional qualifications/
certification such as CISA is a must.
- Minimum 14 years’
of IT auditing experience and sound knowledge of Telco IT and network
technology risk management & controls, with at least 8 years in a
- Those with internal audit
experience in complex business environment, IT project management, IT security, cloud auditing and IT
risk management and audit framework, network operations &
maintenance, network planning, performance and quality assurance would be
- Strong understanding of IT
internal auditing standards, risk management practices, COSO, COBIT and
System Development Life Cycle methodologies.
- Strong IT technical knowledge
in general and application control and can evaluate and identify opportunities for controls
- Experience in audits on
application systems, web applications, data centres, network, security and internet/E Commerce.
- Exposure to AWS, API, Ariba,
Payment Networks, ERP, SAP, Windows or UNIX
platforms would be preferred.
- Experience in data
- Familiar with corporate governance, relevant
regulatory requirements, and telco industry best practices.
in collecting and analysing complex data, evaluating information and
systems, and drawing logical conclusions from risks and control
- Possess quantitative, analytical, data-intuition, problem-solving
skills, and proficiency in data analytics and automation techniques.
- Knowledge in the use of
analytical tool, i.e. ACL/IDEA/PowerBI,
Tableau, SQL would be an added advantage.
- Experience with utilizing data
over annual audit planning, risk assessments and continuous auditing is
in the use of MS Word, Excel and PowerPoint.