About the role

Senior Officer – IT Audit role focused on identifying and evaluating IT risks, developing risk-based audit plans, and assessing the design and operational effectiveness of IT controls across the organization.

Key responsibilities

• Identify and evaluate IT risks (e.g., cyber threats, AI governance, data privacy breaches)
• Develop a dynamic, Risk-Based IT Audit Plan aligned with the organization's strategic objectives
• Assess the design and operational effectiveness of overarching IT controls, including Logical Access, Change Management, IT Operations, and System Development
• Audit specific automated controls within business applications to ensure data accuracy, completeness, validity, and authorization (e.g., automated calculation checks in ERP systems)
• Verify that IT systems comply with relevant laws and frameworks (e.g., PDPA, GDPR, ISO/IEC 27001, NIST, PCI-DSS, and industry-specific regulations)
• Communicate audit findings, impacts, and actionable recommendations to executive management and the Audit Committee
• Follow up on management's remediation actions to ensure risks are effectively mitigated

About you

• Bachelor's degree or higher in Information Technology, Computer Science, Computer Engineering or related fields
• Minimum of 2 years' experience in IT Internal Audit
• Solid understanding of Network Security fundamentals, Operational Technology (OT) Security concepts, Cloud Security, Third-Party & Supply Chain Risk Assessment, AI Governance & Machine Learning Audit
• Strong knowledge of both IA standard and IT Audit standards, IT Security frameworks, and relevant laws/regulations
• Experience in testing IT controls (e.g., IT governance, cybersecurity, ISO 27001, ISO 27701, SDLC) is highly desirable
• Professional certifications such as CISA, ISC2, or equivalent is an advantage
• Fluent in English both written and verbal (Minimum 750 TOEIC score)
• Ability to travel/work in upcountry and abroad