Job Responsibility:
Managerial
- Assist supervisors manage the audit portfolio to achieve IAD objectives.
- Assist supervisors to develop the IAD IT Audit Plan and conduct internal audit activities/assignments.
- Assist in special assignments.
Operational
- Lead in the planning and administration of audit assignments to achieve audit objectives.
- Analyse and identify key risks and develop appropriate audit programmes and tests for review and approval.
- Conduct preliminary assessment of auditable areas; interview appropriate personnel; determine data requirement; accumulate, verify and analyse available data; observe actual practices and evaluate operational function.
- Identify cause of lapses and weaknesses; investigate, analyse and identify possible solutions or avenues for improvement and recommend best practices.
- Communicate regularly with supervisors on progress of work assigned.
- Communicate with auditees at appropriate level on findings/ recommendations.
- Provide guidance and instructions to audit team members and review their work so as to ensure that audit assignments are conducted efficiently within allocated time.
- Where there are indications that the audit cannot be completed within the time planned, supervisors should be informed. The revised timing must be agreed with supervisors or CIA.
- Ensure working papers are properly organised and documented to meet IAD established procedures.
- Assist in/conduct entrance and exit audit meetings.
- Prepare draft audit reports with appropriate recommendations for review
- Assist supervisors finalise audit report for prompt issuance.
- To ascertain and report in a timely manner whether corrective actions are undertaken by auditees especially during Audit Compliance Committee (ACC).
- To prepare or review draft IT audit reports.
- Undertake any other work required by the management with the approval of the VP or CIA.
- Keep abreast of the evolution of technology used in the Corporation and be knowledgeable in professional matters in IT auditing areas including IT controls and audit techniques. Assess and recommend appropriation actions on effects of these development and changes.
- Comply with all applicable CGC Risk, Compliance, and governance policies, maintain ongoing awareness of risks relevant to the role, and promptly escalate any suspected or actual breaches, control weaknesses, or risk events in accordance with CGC's designated channels.
Job Requirement:
Qualification:
Relevant tertiary education in Computer Science/IT/Cybersecurity or equivalent
Certified Information System Auditor (CISA) professional certification preferred.
Experience:
About 8 years experiences in IT auditing with at least 3 years at supervisory level.
Knowledge:
- IIA's International Professional Practice Framework (IPPF), COSO's Internal Control Framework, COBIT Framework, BNM's Guidelines and key references i.e. Risk Management in Technology (RMIT).
- Knowledge of IT security and controls of various IT systems such as operating systems (Cloud Computing/Unix/Windows Server), network (TCP/IP, Firewall), various database application and management systems. Exposure to data centre reviews, and system development life cycle methodologies and projects. Hands-on knowledge and skills of Computer Assisted Audit Tools (CAATs), e.g. ACL.
Skills/Competencies:
- Demonstrates sound supervisory judgment with developing leadership capabilities. Analytical, management and supervisory capabilities and strong work commitment, leadership, high moral values, integrity, good communication skills (both verbal and written).
- Ability to gather, analyze and evaluate facts and to prepare and present concise oral and written reports.
- Ability to maintain current knowledge of developments related to business matters of interest to internal audit and new auditing techniques and practices.
- Good communication and interpersonal skills with high proficiency in verbal and written English & Bahasa Melayu.
- Strong analytical skills and able to evaluate, form logical conclusions and reason with facts.
- Good work attitude, flexible, able to work independently and willing to take on challenges.
