รายละเอียดตำแหน่งงาน / คำบรรยายลักษณะงาน :
An Internal auditor is responsible for the internal controls and risks of a company s technology. This role includes identifying the weaknesses/risks in the systems and creating an action plan to prevent security breaches in the technology. S/he will be involved in the planning and execution of internal audit procedures and the creation of internal audit reports. S/he must work within a team to create a solid information technology infrastructure, and collaborate with stakeholders to devise and put in place policies and procedures regarding security issues.
Key Responsibilities:
?Provides project leadership for internal audit engagements and assists external auditors in the performance of scheduled audit activities.
?Drafts and reviews written audit reports which accurately describe results of tests performed and the nature of control weaknesses and exposures; express an opinion on the adequacy of internal controls and overall procedures; and identify practical recommendations for improvements.
?Assist in the communication (verbal and written) of findings and recommendations to all levels of departmental and operating unit management.
?Assists division management in the implementation of audit recommendations.
?Assists in implementation of general controls: computer operations, information security, change management, business continuity, disaster response plan, etc.
?Assists in developing and executing specific engagement plans, including the preparation and/or modification of detailed programs for tests of controls and audit procedures.
?Perform targeted fieldwork to test internal controls across the companys application, infrastructure, and databases, as well as key business processes.
?Keep yourself updated in audit standards (e.g. COBIT, ITIL, ISO/IEC 27001), international best practices and guidelines issued by internal audit group and/or regulators to improve audit effectiveness and efficiency.
?Assist with other projects and various tasks may arise.
ชาย/หญิง ?Thai Nationality
?Degree or higher in Computer Engineering/Science, Information Technology, Information Systems, or equivalent. CISA/CISM certification is advantage.
?3-7 years of professional experience in internal audit with a strong technology background
?Experience in one or more additional areas: IT/IS audit, risk assessment, system/application/network security, cyber risk assessment, or business intelligence.
?IT experience in application development, infrastructure configuration of hardware (server/database), or security controls is required.
?Knowledge of various technologies, applications, operating systems, and databases including Unix/Linux, web services, firewalls, etc.
?Strong grasp of ISO27001 and IT general controls and experiences in applying leading standards/practices.
?Good understanding of the system development lifecycle and the business risks associated with system implementations
?Strong project management, communication, facilitation and presentation skills
?Ability to communicate security-related concepts to a broad range of technical and non-technical staff
ตำแหน่งงานว่าง
