Job Summary

Provide IT Audit services (both assurance & advisory) for Kiatnakin Phatra Financial Group.

Role and Responsibilities

หน้าที่ความรับผิดชอบ

Perform audit assignments from end-to-end (planning, execution, reporting, follow-up) according to the annual audit plan, also communicate significant audit findings to Senior Management in a timely manner.

• Ensure quality and timeliness of audit services (e.g., effective audit planning, managing audit resources & timeline, identifying potential findings & root-cause analysis, providing practical recommendation, etc.)

• Assist in managing professional relationships with audit clients and stakeholders (e.g., regulators)

• Assist in developing/updating annual audit plan by using risk-based audit approach

• Work closely with other audit teams (e.g., non-IT auditors) as a part of integrated audit team, and also ensure harmonization among teams

• Others as assigned by Audit Management

Qualifications

คุณสมบัติ

Bachelor's degree or higher in IT, Computer Engineering/Science, MIS/AIS, or any related fields

• At least 5 years of work experience in IT Audit/IT Risk & Controls, IT Security or related fields, with a few years in managing end-to-end audit activities (planning, execution, reporting) and also supervising team members.

• Experiences in Banking and other Financial Services industries (e.g., Securities, Asset Management, Insurance), and/or Big4 firms with focus on these industries

• Hands-on experiences in reviewing IT general and application controls (incl. review of IT infrastructure and new technology, e.g., operating system, middleware, database, network, web/mobile application, API, biometric, and cloud)

• Fundamental skill in using Data Analytics tools/techniques (e.g., Power Query, Power BI, Power Automate, Databricks)

• Familiar with key IT-related regulatory requirements (e.g., BOT, SEC) and basic knowledge of relevant leading standards (e.g., ISO27001, COBIT, ITIL, NIST, OWASP)

• Recognized with relevant professional certifications (e.g., CISA, CISSP, CISM, ISO/IEC 27001 Lead Auditor, etc.) would be a plus.

Specific knowledge and skill / ความรู้เฉพาะตำแหน่ง

• Positive attitude and growth mindset

• Result oriented, and willing to learn

• Logical thinking, problem solving & analytical skills

• Leadership & interpersonal skills

• Communication skills (e.g., presentation, report writing)

• Conflict management & negotiation skills