IT Audit And Risk Assessment (Senior)

ABOUT THE JOB

• Implement and execute the Technology Assurance framework to assess the efficiency of internal controls related to technology.
• Provide expert-level guidance on compliance requirements and risk assessment methodologies.
• Conduct technical audits to evaluate the effectiveness of IT security controls and risk mitigation strategies.
• Collaborate with Group InfoSec Governance to identify key risks and ensure compliance with international and local regulatory requirements.
• Define and oversee testing scenarios for assessing internal controls.
• Ensure timely remediation of control weaknesses and vulnerabilities.
• Monitor industry trends and advise on best practices for IT security and compliance.
• Work closely with business units and IT teams to enhance risk management strategies.

ABOUT YOU

• Bachelor’s degree in information technology or a related field.
• 6+ years of experience in IT Audit and Risk Assessment.
• Knowledge of IT security frameworks (e.g., ISO 27001, COBIT, ITIL, SOC 2).
• Industry certifications such as CGEIT, CISSP, CISM, CISA, CRISC, PCI DSS.
• Strong stakeholder management and communication skills.
• Good command of English.
• Ability to deliver projects under tight deadlines.
• Knowledge of privacy regulations and data protection.
• You demonstrate analytical thinking and the ability to work under pressure.