Senior Officer - IT Audit

Your tasks

• Identify and evaluate IT risks (e.g., cyber threats, AI governance, data privacy breaches)

• Develop a dynamic, Risk-Based IT Audit Plan aligned with the organization's strategic objectives

• Assess the design and operational effectiveness of overarching IT controls, including Logical Access, Change Management, IT Operations, and System Development

• Audit specific automated controls within business applications to ensure data accuracy, completeness, validity, and authorization (e.g., automated calculation checks in ERP systems)

• Verify that IT systems comply with relevant laws and frameworks (e.g., PDPA, GDPR, ISO/IEC 27001, NIST, PCI-DSS, and industry-specific regulations)

• Communicate audit findings, impacts, and actionable recommendations to executive management and the Audit Committee

• Follow up on management's remediation actions to ensure risks are effectively mitigated

Requirements

1. Bachelor's degree or higher in Information Technology, Computer Science, Computer Engineering or related fields
2. Minimum of 2 years' experience in IT Internal Audit
3. Solid understanding of Network Security fundamentals, Operational Technology (OT) Security concepts, Cloud Security, Third-Party & Supply Chain Risk Assessment, AI Governance & Machine Learning Audit
4. Strong knowledge of both IA standard and IT Audit standards, IT Security frameworks, and relevant laws/regulations
5. Experience in testing IT controls (e.g., IT governance, cybersecurity, ISO 27001, ISO 27701, SDLC) is highly desirable
6. Professional certifications such as CISA, ISC2, or equivalent is an advantage
7. Fluent in English both written and verbal (Minimum 750 TOEIC score)
8. Ability to travel/work in upcountry and abroad