Information Technology Auditor

Company Description

Bangchak Corporation Public Company Limited is a leading Thai energy company that combines commercial growth with strong social and environmental responsibility. The company focuses on innovation-driven businesses that enhance national energy security and support long-term sustainability for the organization and Thai society. Established as a state enterprise in 1984 and listed on the stock exchange in 2001, Bangchak has a solid track record and stable foundation. Its operations span five core businesses across the energy value chain, from upstream to downstream, supported by the Bangchak Initiative and Innovation Center. Bangchak offers talent opportunities to contribute to impactful projects in a dynamic and future-focused energy sector.

Role Description

This is a full-time, hybrid Information Technology Auditor role based in Bangkok City, Thailand, with flexibility for partial work from home. The Information Technology Auditor will plan and execute IT audit engagements focusing on systems, applications, infrastructure, and processes across the organization. Daily responsibilities include assessing IT controls, testing the design and operating effectiveness of security and governance controls, and identifying control gaps or process improvement opportunities. The role involves preparing clear audit workpapers and reports, presenting findings and recommendations to stakeholders, and following up on remediation actions. The Information Technology Auditor will collaborate closely with IT, security, and business teams to ensure compliance with internal policies, regulatory requirements, and industry best practices, while supporting the development of risk-based audit plans and methodologies.

Qualifications

• Strong IT audit capabilities, including experience with IT Audit methodologies, risk-based audit planning, and reporting.
• Knowledge of IT Controls and governance frameworks (e.g., COBIT, ITIL, ISO 27001) and experience evaluating control design and effectiveness.
• Solid foundation in Information Technology, including understanding of systems, networks, databases, and enterprise applications.
• Understanding of Information Security principles, including access management, data protection, and security monitoring.
• Well-developed Analytical Skills with the ability to interpret complex technical information, identify root causes, and propose practical solutions.
• Bachelor's degree in Information Technology, Computer Science, Information Systems, Accounting, or a related field.
• Professional certifications such as CISA, CISSP, CISM, or equivalent are an advantage.
• Ability to communicate clearly in written and spoken English; Thai language skills are beneficial for stakeholder communication.
• Strong teamwork, stakeholder management, and time management skills, with the ability to work effectively in a hybrid environment.