Information Technology Auditor

Job Descriptions:

• Support Head of IT Audit in preparing the annual IT audit risk assessment by gathering IT risk assessment results along with the regulatory requirements to prepare annual IT audit plan.
• Evaluate the completeness and accuracy of IT system processing as well as security controls, reliability of information presented and use of IT systems and other IT systems of the Bank and its subsidiary company according to the approved audit plan.
• Provide independent advice on the development, implementation and operation of major IT systems to increase the effectiveness and adequacy of IT monitoring systems and enhance the security controls.
• Being Team Leader to monitor the assigned IT audit project to be completed with quality within timeline.
• Coordinate with the other relevant departments with respect to the audit activities.
• Communicate notable audit issues to the appropriate department to determine corrective action plans and make constructive recommendations that add value to audited department.
• Prepare the completeness and the accuracy of audit working papers and the draft audit report.
• Review the progress report of corrective actions taking as action plans identified in the audit reports on monthly basis Stakeholder Relationships.
• Coordinate with the external auditors and the BOT examiner as assigned.
• Develop and maintain effective communication and engagement with internal and external stakeholders.

Job Qualifications:

• A bachelor's degree or higher in Information Technology or related field, such as statistics, MIS, etc.
• A Certified Information Systems Auditor (CISA) or Certified Information Security Manager (CISM) or Certified Information Systems Security Professional (CISSP) is a must.
• At least 10 years of professional experience in IT, Cyber Security, Data and/or IT audit, IT Risk and Control and/or related fields.
• Has experienced in information technology risk management or information technology investigation or information technology development or operation system and network system, database management, network security including other IT security control.
• Strong knowledge of banking/financial services industry particularly IT, Data, Cyber, Data Analytics, and regulatory environment.
• Proficient at applying risk-based internal audit standards and methods is preferred.
• Strong knowledge in the Bank of Thailand regulation and SEC.