Senior IT Auditor

• Participate in IT audit engagements in line with the approved annual audit plan, as assigned by the Head/Team Leader of Internal Audit

• Assess IT systems, IT projects, applications, and infrastructure controls to identify risks, deficiencies, and improvement opportunities

• Discuss with the person in charge of the related Dormain/Department about audit findings and agree on the implementation and timeline of audit recommendations

• Regularly monitor and update IT-related risks to support the enhancement of risk-based audit methodology

• Draft and update internal documents of the Internal Audit Department (Charter, Process, Manual/Guideline)

• Participate in all training courses of the Internal Audit Department and MBAL to improve professional expertise and meet the requirements of internal audit work

• Other work assigned by the Head of Internal Audit

• Bachelor’s degree in Accounting/Auditing, Information Technology/Cybersecurity/Information Systems, or other relevant field that is suitable for internal audit work

• Minimum 2–3 years of experience in IT audit, IT risk management, IT internal control, or related security/system roles

• Preferred candidates that possess professional certifications such as CISA, CISM, CISSP, ISO 27001, or equivalent

• Able to read IT technical documents and communicate in English. Preferred candidates with TOEIC >600 or IELTS ≥6.0.

• Proficient in MS Office; knowledge of IT systems, cybersecurity, databases, and insurance core systems; preferred with data analysis tools (SQL, Power BI, etc.).