JOB PURPOSE

Internal Auditing is an independent, objective, assurance and consulting activity designed to add value and improve an organization's operations. It helps Ascend Money accomplish its objectives by bringing a systematic, disciplined approach to evaluate and improve the effectiveness of risk management, control, and governance processes. The IT Audit will assist Chief Audit Executive in providing an independent and objective assurance of risk management, controls and governance process throughout the Ascend Money . He/she is also responsible in leading different engagements per Audit plan that are focused on IT system. RESPONSIBILITIES

• Assist the Chief Audit Executive in creating and/or updating the following: - Group Internal Audit Charter; and - Group Internal Audit Policies and Procedures Manual;
• Assist the Chief Audit Executive in developing an internal audit plan based on IT audit universe using a risk-based methodology.
• Plan, develop and undertake internal audits to evaluate design and operating effectiveness of IT controls with a focus on IT applications, IT infrastructure (e.g. network, databases, operating system), and IT processes (e.g. security, business continuity, change management, asset management, system development, backup & restore, access management)
• Where external resources are involved e.g. technical audits, work with Chief Audit Executive to define the scope, manage the audit vendor in the execution of audit fieldwork, including review of outcomes and reports, to ensure audit work provides appropriate assurance and completeness in scope.
• Prepare and issue a written report following the conclusion of each IT engagement and submit to the Chief Audit Executive for review and approval.
• Initiate periodic follow-up on engagement findings and recommendations, escalate the overdue audit issues to the Chief Audit Executive as well as audit committee and validate the closure of audit findings.
• Assist the Chief Audit Executive to organize, schedule and prepare agenda of the Audit Committee Meeting.
• Conduct special investigation and audit assignment as requested by the audit committee and/or senior management. QUALIFICATIONS Educational Background
• Bachelor or Master degree in Computer Science, Computer Engineering, Information Technology, Information Systems or other related fields. Professional Certification:
• IT professional certifications (e.g. CISA, CISM, CRISC, CISSP, ISO/IEC 27001) are required. Work Experience:
• Minimum of 6-8 years working experiences in IT Audit, IT Security, IT Technical preferably in BIG4 and / or Financial Institution.
• At least 2 years experience in leading a team in different engagements. Other Skills
• Strong English language (Speaking, Reading and Writing).
• Familiarly with COBIT, ITIL, ISO 27001 and compliance regulations standards such as BOT, SEC.
• One or more scripting languages (e.g., Python, Powershell) is advantage.
• Penetration testing at network, web & mobile application and wireless level (Kali, Wireshark) and vulnerability scanning tools (e.g., Nessus, Nexpose, etc.) are required.
• Self-starter and self-driven with ability to work in a fast-paced environment, both independently and as a part of the team under tight deadline, and manage multiple tasks in parallel.