Senior Officer
4 days ago
Bangkok, ไทย
Gulf Development Public Company Limited
เต็มเวลา
ฟรีด้วยอีเมลหรือ Google
บันทึกงานนี้และจัดระเบียบการค้นหาของคุณ
สร้างบัญชีฟรีเพื่อบันทึกงาน สร้างการแจ้งเตือน และกลับมาที่รายการนี้จากแดชบอร์ดของคุณ
ฟรีด้วยอีเมลหรือ Google
เมื่อดำเนินการต่อ แสดงว่าคุณยอมรับ ข้อกำหนด & นโยบายความเป็นส่วนตัว.
Responsibilities
• Identify and evaluate IT risks (e.g., cyber threats, AI governance, data privacy breaches).
• Develop a dynamic, Risk-Based IT Audit Plan aligned with the organization's strategic objectives.
• Assess the design and operational effectiveness of overarching IT controls, including Logical Access, Change Management, IT Operations, and System Development.
• Audit specific automated controls within business applications to ensure data accuracy, completeness, validity, and authorization (e.g., automated calculation checks in ERP systems).
• Verify that IT systems comply with relevant laws and frameworks (e.g., PDPA, GDPR, ISO/IEC 27001, NIST, PCI-DSS, and industry-specific regulations).
• Communicate audit findings, impacts, and actionable recommendations to executive management and the Audit Committee.
• Follow up on management’s remediation actions to ensure risks are effectively mitigated. Qualifications
• Bachelor’s degree or higher in Information Technology, Computer Science, Computer Engineering or related fields.
• Minimum of 2 years’ experience in IT Internal Audit. Required Skills
• Solid understanding of Network Security fundamentals, Operational Technology (OT) Security concepts, Cloud Security, Third-Party & Supply Chain Risk Assessment, AI Governance & Machine Learning Audit
• Strong knowledge of both IA standard and IT Audit standards, IT Security frameworks, and relevant laws/regulations.
• Experience in testing IT controls (e.g., IT governance, cybersecurity, ISO 27001, ISO 27701, SDLC) is highly desirable.
• Professional certifications such as CISA, ISC2, or equivalent is an advantage.
• Fluent in English both written and verbal (Minimum 750 TOEIC score).
• Ability to travel/work in upcountry and abroad.
• Goal–Oriented, Unity, Learning, Flexible.
• Identify and evaluate IT risks (e.g., cyber threats, AI governance, data privacy breaches).
• Develop a dynamic, Risk-Based IT Audit Plan aligned with the organization's strategic objectives.
• Assess the design and operational effectiveness of overarching IT controls, including Logical Access, Change Management, IT Operations, and System Development.
• Audit specific automated controls within business applications to ensure data accuracy, completeness, validity, and authorization (e.g., automated calculation checks in ERP systems).
• Verify that IT systems comply with relevant laws and frameworks (e.g., PDPA, GDPR, ISO/IEC 27001, NIST, PCI-DSS, and industry-specific regulations).
• Communicate audit findings, impacts, and actionable recommendations to executive management and the Audit Committee.
• Follow up on management’s remediation actions to ensure risks are effectively mitigated. Qualifications
• Bachelor’s degree or higher in Information Technology, Computer Science, Computer Engineering or related fields.
• Minimum of 2 years’ experience in IT Internal Audit. Required Skills
• Solid understanding of Network Security fundamentals, Operational Technology (OT) Security concepts, Cloud Security, Third-Party & Supply Chain Risk Assessment, AI Governance & Machine Learning Audit
• Strong knowledge of both IA standard and IT Audit standards, IT Security frameworks, and relevant laws/regulations.
• Experience in testing IT controls (e.g., IT governance, cybersecurity, ISO 27001, ISO 27701, SDLC) is highly desirable.
• Professional certifications such as CISA, ISC2, or equivalent is an advantage.
• Fluent in English both written and verbal (Minimum 750 TOEIC score).
• Ability to travel/work in upcountry and abroad.
• Goal–Oriented, Unity, Learning, Flexible.