ROLE PURPOSE:

Participate/Lead in risk-based and client-focused Technology audits.  Manage the audit planning, fieldwork, report writing, maintenance of audit working papers and follow up of corrective action plans.    Lead audit assignments and perform duties of the Lead Auditor as and when tasked by the GIA management.  Assist fellow auditors with their daily audit work whenever required.

Lead/ participate in business application reviews and integrated audits.  Support in developing, collecting and maintaining data analytics required for GIA’s continuous auditing and data requirements.

Key Accountabilities of the role

As part of the Technology Audit Universe/Plan, the following are the key accountabilities:

• Execute /Manage various phases of an audit assignment which include:
• Assist/Lead the planning of audit assignments.
• Conduct discussions and walkthroughs as part of the planning phase.
• Prepare/contribute/review Audit Programs and obtain necessary approvals.
• Execute the approved Audit Program.  Complete the audit tests for the areas allocated in an audit assignment within the agreed timelines.
• Draft/Finalize audit findings for the exceptions identified during audit fieldwork.  Engage with the audit entity to discuss and ascertain the factual accuracy of the finding.
• Ensure that all the audit tests conducted are supported with adequate documentation.  Complete the work papers in the audit management system for review.
• Join the audit team’s discussions and meetings with the auditee’s management and staff members to ensure successful and timely execution of audit engagements.
• Lead audits and assume the role of the Lead Auditor as and when tasked by GIA management.
• Support the follow-up and closure of corrective action plans.  Discuss and review the corrective action plans closures submitted by the business and recommend appropriate actions to the Heads of Audit/ Sr. Manager.
• Lead/participate in Business Applications Review and Integrated Audits.
• Support the Continuous Audit initiative through data mining/extraction, query building based on requirements and creating exception alerts.
• Support other audit teams in ad hoc audit data requirements through timely and accurate data extraction.
• Support the Senior Audit Managers and Heads of Audit in advisory / consultancy assignments.
• Ensure consistent application of Group Internal Audit methodology.
• Engage in Continuous Professional Education and Individual Development Plan through attending relevant trainings, conferences, and pursuing certifications relevant to the field of internal audit.
• Support in coaching and supervision of junior members of GIA team.
• Perform any other additional tasks as assigned by GIA management.

Specialist Skills / Technical Knowledge, Technical Competencies Required for this role:

• Bachelor’s degree in relevant fields (i.e., Computer Science, Information Systems Engineering, Cyber Security etc.) from a recognized institution.
• CISA certification is mandatory. Other certifications such as CIA, CISSP, CDPSE, CRISC, Data Science etc. are preferred.
• Specialised knowledge in Enterprise Infrastructure, Cybersecurity, software development tools/models, digital banking, cloud architecture and auditing banking business applications.
• Understanding of regulatory requirements with regards to Information Technology, Information Security and Cyber Security.
• Reasonable understanding of best practices such as COBIT, ITIL, NIST, ISO27001 and CMMI.
• Qualifications/experience in data analytics, SQL queries and Access database management is highly desirable.
• High degree of analytical, reasoning/judgmental skills.
• Excellent communication (writing & verbal) skills.