Reporting to the Head of Internal Audit Department for day-to-day activities, the successful candidate will be responsible for planning and performing risk-based IT audit, including preparing effective audit programme and executing audit to evaluate the adequacy and effectiveness of policies and procedures and related internal control, communicate with auditees and report findings and recommendations properly.
Main Responsibilities:
- Conduct risk-based audits in IT area to assess the company's IT management, identify internal control deficiencies and propose recommendations.
- Prepare effective internal audit programmes based on risk identification and assessment, periodically update audit programs in designated area to ensure that audits are executed rigorously and consistently and reflect the business changes accordingly.
- Perform assigned audits by executing approved audit programs and questionnaires.
- Review and evaluate the adequacy and effectiveness of policies and procedures and related internal controls.
- Identify internal control deficiencies, prepare reports on audit findings and recommendations, and communicate audit findings to the auditee, evaluate adequacy of auditee's responses to the audit issue raised.
- Evaluate auditee's response to ensure that they adequately address the audit issue raised.
- Supervise and independent assess the internal and external IT audit issues remediation status.
- Understand the industry knowledge, company policies and procedures and other applicable laws and regulations for audit purpose.
- Recommend improvements for departmental performance.
- Prepare, maintain and update audit files accordingly, including audit workpaper, audit report, training record, etc.
- Complete other assignments from Head of Internal Audit Department.
Requirements:
- Bachelor's degree major Information Technology and other related major preferred.
- Good interpersonal skills, ability to listen to different viewpoints and subsequently develop sound arguments/opinions and communicate these to auditees.
- Proficient language skills in English, read, analyse, and interpret IT related materials, ability to write reports, business correspondence, procedures, and manuals, ability to communicate and write in Chinese will be a plus.
- Good team player, be able to prioritize work, commit to the team's growth and improvement, develop ways to help team meet its goals, adaptable to change.
- Possess necessary IT expertise and skills, be familiar with IT policies, processes, and tools.
- At least 3 years work experience in IT auditing or other related area, experience in aviation related industry, such as airline, MRO or manufactures, banking industry or external auditor will be plus.
