IT Audit Specialist

About the Role

Support Head of IT Audit in developing the IT Audit Annual Plan based on overall IT risk and existing control status, and provide IT risk advisory and audit services across IT, digital technologies, infrastructure, applications and IT service management.

Responsibilities

• Develop an IT Audit Annual Plan based upon overall IT risk and existing control status of the Bank’s universes.
• Assess and review adequacy and effectiveness of controls on IT Governance and IT Service Management processes supporting IT, business strategy, and operations (e.g., availability management, access management, IT service continuity management).
• Conduct reviews on IT controls required by regulators (e.g., Sarbanes-Oxley, National Credit Bureau, Bank of Thailand, SEC of Thailand) and monitor compliance with IT regulations and the Bank’s IT policies, standards, and procedures.
• Provide IT risk advisory services for IT initiatives and conduct priority audit activities as required by management related to financial services, digital technologies, infrastructure, application controls, IT service management, and IT compliance/regulators.
• Develop and perform Continuous Control Monitoring (CCM) via programming, scripts, and methods to regularly detect control weaknesses related to IT risk.
• Ensure mitigation actions for IT residual risks are performed properly as agreed with appropriate acknowledgement from management.

Qualifications

• Bachelor’s degree in IT, Information System, Computer Science, Engineering, Accounting, Business Administration or related fields.
• Only Thai Speaker.
• At least 8-10 years' work experience in IT internal/external audit, IT compliance, IT risk management, or IT security.
• Experience in control design and/or implementation over IT risk.
• Strong testing experience on IT controls (e.g., IT governance, Cyber security, ISO27001/27002, SAS70, SDLC and Change management, Network security, Platform security covering configuration management).
• Good knowledge in IT Audit, IT Compliance, IT Risk or IT Security.
• Good English communication (both written & verbal).
• Preferable certifications: CISA or CISSM or CISSP, or other related certifications.