Core Audit & Risk Responsibilities
- Annual Audit Planning: Develop and execute a risk-based annual IT audit plan that covers critical areas like cybersecurity, IT infrastructure, application integrity, and cloud computing environments.
- Audit Execution & Management: Oversee the end-to-end audit lifecycle, from scoping and testing procedures (e.g., ITGC and SOX compliance) to final reporting and issue closure.
- Technical Assessments: Conduct complex reviews of IT governance, data quality, and cybersecurity frameworks (e.g., NIST, ISO) to identify emerging risks.
- Remediation Tracking: Monitor and validate the implementation of corrective actions to ensure control weaknesses are effectively addressed.
Strategic & Leadership Duties
- Stakeholder Engagement: Act as a strategic advisor to senior management and audit committees, translating technical risks into actionable business insights.
- Process Improvement: Drive the evolution of audit methodologies by integrating data analytics, scripting, and automation tools to improve efficiency.
- Advisory Services: Provide consultancy on internal controls for new system implementations or major business expansions.
Requirements
- Bachelor's degree
- A minimum of 12 years gained from large companies
- Fluent English and Chinese
