IT Audit

Job Summary

Provide IT Audit services (both assurance & advisory) for Kiatnakin Phatra Financial Group.

Role and Responsibilities / หน้าที่ความรับผิดชอบ

• Perform audit assignments from end-to-end (planning, execution, reporting, follow-up) according to the annual audit plan, also communicate significant audit findings to Senior Management in a timely manner.
• Ensure quality and timeliness of audit services (e.g., effective audit planning, managing audit resources & timeline, identifying potential findings & root-cause analysis, providing practical recommendation, etc.)
• Assist in managing professional relationships with audit clients and stakeholders (e.g., regulators)
• Assist in developing/updating annual audit plan by using risk-based audit approach 
• Work closely with other audit teams (e.g., non-IT auditors) as a part of integrated audit team, and also ensure harmonization among teams
• Others as assigned by Audit Management

Qualifications / คุณสมบัติ

• Bachelor’s degree or higher in IT, Computer Engineering/Science, MIS/AIS, or any related fields
• At least 5 years of work experience in IT Audit/IT Risk & Controls, IT Security or related fields, with a few years in managing end-to-end audit activities (planning, execution, reporting) and also supervising team members.
• Experiences in Banking and other Financial Services industries (e.g., Securities, Asset Management, Insurance), and/or Big4 firms with focus on these industries
• Hands-on experiences in reviewing IT general and application controls (incl. review of IT infrastructure and new technology, e.g., operating system, middleware, database, network, web/mobile application, API, biometric, and cloud)
• Fundamental skill in using Data Analytics tools/techniques (e.g., Power Query, Power BI, Power Automate, Databricks)
• Familiar with key IT-related regulatory requirements (e.g., BOT, SEC) and basic knowledge of relevant leading standards (e.g., ISO27001, COBIT, ITIL, NIST, OWASP)
• Recognized with relevant professional certifications (e.g., CISA, CISSP, CISM, ISO/IEC 27001 Lead Auditor, etc.) would be a plus.

Specific knowledge and skill / ความรู้เฉพาะตำแหน่ง

• Positive attitude and growth mindset
• Result oriented, and willing to learn
• Logical thinking, problem solving & analytical skills
• Leadership & interpersonal skills
• Communication skills (e.g., presentation, report writing)
• Conflict management & negotiation skills