Description

• Annual Audit Planning: Develop and execute a risk-based annual IT audit plan that covers critical areas like cybersecurity, IT infrastructure, application integrity, and cloud computing environments.
• Audit Execution & Management: Oversee the end-to-end audit lifecycle, from scoping and testing procedures (e.g., ITGC and SOX compliance) to final reporting and issue closure.
• Technical Assessments: Conduct complex reviews of IT governance, data quality, and cybersecurity frameworks (e.g., NIST, ISO) to identify emerging risks.
• Remediation Tracking: Monitor and validate the implementation of corrective actions to ensure control weaknesses are effectively addressed.

• Stakeholder Engagement: Act as a strategic advisor to senior management and audit committees, translating technical risks into actionable business insights.
• Process Improvement: Drive the evolution of audit methodologies by integrating data analytics, scripting, and automation tools to improve efficiency.
• Advisory Services: Provide consultancy on internal controls for new system implementations or major business expansions.

• Bachelor's degree
• A minimum of 12 years gained from large companies
• Fluent English and Chinese