AddressMain Purpose :
- Collaborate in the design and maintenance of the IT related internal control framework for the Group and
- Support continuous improvement of effective IT related control environment and efficient processes flows for the Group;
Experience, Knowledge and Skills :
Mandatory :
- Bachelor or Master degree level with focus in Information Technology, Computer Science, IT Audit or equivalent
- Senior profile with 8 to 10 years of relevant experience in internal audit or a combination of external/internal audit with experience in review and assessment of IT process and controls, IT application reviews and ITGCs
- Knowledge of frameworks such as COBIT and ITIL, processes re-engineering and efficiency assessment for IT processes
- Excellent knowledge of IT General Controls
- Experience in IT audit planning, execution and reporting
- Experience in post-implementation audits; assessing systems performance and functionality, identifying issues or areas of improvement. Experience in examining the security measures and controls for data protection and access rights
- Ability to work with Excel, Visio, PowerPoint and Word
- Excellent writing, verbal and presentation skills in English
- Ability to act successfully in an international business and multicultural context
- Good interpersonal skills and ability to interact with varying levels of the organization
- Independent, flexible team player with strong analytical and influencing skills and conceptual thinker
- Taking ownership and accountability and comfortable to work in a pressured environment
Desirable :
- Oil/Metals/Commodity Trading/Financial Markets business experience;
- CISA, CRISC, Certified IT auditor, CCAK, CISM or similar certifications
Key Responsibilities :
- Analyze and document IT processes, identification of process risks and mitigating controls
- Perform IT General Controls validations to ensure design and operating effectiveness of IT General Controls
- Prepare the audit findings and propose recommendations to IT management
- Verify adherence to IT policies and assess how effective procedures, control and systems are to support such policy on a daily basis
- Verify the usage of the system and suggest improvements to ensure continuous improvement and further automation
- Ad-hoc IT reviews/IT audits as required by the Internal Control plan
- Follow-up and perform validation of remediation activities to ensure control issues are effectively resolved.
