Deputy Manager, IT Audit

Key accountabilities

• To assist the Head, IT Audit and Analytics to undertake audit of IT areas such as general computer controls, applications, network infrastructure, data centres and systems using a COBIT risk-based approach.
• To adopt advisory role in system development projects and recommend improvements on IT governance, risk management and controls.
• To use data analytic tools and processes to assist all countries' Finance and Operational Internal audit teams in delivering enhanced value to IHH management.
• Conducts Information Technology (IT) audits, risk assessment, security and control reviews and Systems Development Life Cycle (SDLC) audits across the entities of Parkway Group.
• Identifies, analyses and communicates any inadequate controls and deviation from established operating standards policies, plans and procedures, laws and regulations to those responsible for corrective action. Performs follow-up reviews as necessary to ensure that corrective action has been taken.
• Reviews new products and systems and major enhancements on timely basis to ensure that risks have been identified and adequate controls are present
• Presents audit findings orally and recommendations.
• Participates in exit meeting when the audit is completed. Clearly explains the significance of all audit findings and recommendations and documenting their responses.
• Advises management of potential control risk issues and recommends beneficial audit initiatives in line with best practices.
• Participates in working committees for IT projects as and when required (e.g. E-forms, Hospital Information System).
• Assist in rolling out Data Analytics (DA) program, integrating DA into Internal audits and providing training to internal auditors to auditors from finance and operational audit teams.

Qualifications & Experience

• Degree in Computer Science or Computer Engineering or Information Systems or Data Science equivalent.
• Minimum 5 years of IT audit or data analyst experience, preferably in international auditing firm or relevant industry.
• Professional certification such as CISA, CISSP, CISM
• Experience in carrying out audits of network security (Cisco routers, switches, Checkpoint firewalls, ), database (MS SQL, Oracle, etc), operating system (UNIX, Microsoft etc), ERP system (such as SAP), general IT controls, application controls and system development process.
• Proficiency in Python, SQL, Microsoft Power BI and data analytics related coding experience