IT Auditor (Techcom Insurance)

Job Purpose

Perform independent and objective assurance activities to evaluate the effectiveness of the Company's information technology governance, risk management, cybersecurity, data governance, and internal control environment. The role is responsible for assessing technology-related risks and controls, identifying improvement opportunities, and supporting the enhancement of audit methodologies through data analytics, automation, and emerging technologies.

Key Accountabilities (1)

IT Audit Execution

• Participate in the development and execution of risk-based IT audit plans.
• Conduct audits covering IT governance, applications, infrastructure, cloud environments, databases, cybersecurity, and technology operations.
• Evaluate the adequacy and effectiveness of IT General Controls (ITGC), automated controls, and technology risk management practices.
• Identify control gaps, security vulnerabilities, operational risks, and regulatory compliance issues.
• Prepare audit reports and recommend practical solutions to strengthen controls and risk mitigation.

Key Accountabilities (2)

Information Security & Cybersecurity Reviews

• Assess security controls relating to access management, identity management, privileged access, and data protection.
• Evaluate cybersecurity governance, incident management, vulnerability management, and security monitoring processes.
• Review compliance with internal security policies and industry standards.
• Assess the effectiveness of controls protecting confidential and sensitive information.

Key Accountabilities (3)

Data & Technology Risk Audit

• Evaluate data governance, data quality, data privacy, and data lifecycle management practices.
• Perform audits of data platforms, databases, analytics environments, and reporting controls.
• Assess technology risks associated with digital transformation initiatives, cloud adoption, AI solutions, and emerging technologies.
• Utilize data analytics techniques to improve audit coverage and identify risk indicators.

Audit Follow-up & Continuous Improvement

• Monitor remediation of audit findings and management action plans.
• Validate the effectiveness of corrective actions.
• Contribute to the enhancement of audit methodologies, tools, and frameworks.
• Promote the use of Data Analytics, AI, and Audit Automation within Internal Audit activities.
• Support knowledge sharing and development of audit team capabilities.

Key Relationships - Direct Manager

Head of Internal Audit

Key Relationships - Direct Reports

Key Relationships - Internal Stakeholders

Internal Divisions/units/subsidiaries related to the functions, tasks stipulated by BOS and as assigned

Key Relationships - External Stakeholders

- State agencies/authorities - MOF, Government inspection; Independent auditors, consulting units,...releated to the functions, tasks stipulated by BOS and as assigned including but not limited to:

- State management agencies upon request;

- Independent Auditing Firms; The consulting company/organization is hired to support the implementation of the Internal Audit's duties;

- Companies/organizations of association nature, professions in the field of insurance, banking, finance, accounting, auditing

Success Profile - Qualification and Experiences

• Bachelor's Degree or above in: IT, Cybersecurity, Auditing, Finance, Other related disciplines.
• Minimum 3-5 years of experience in one or more of the following areas: IT Audit, IT Risk Management, Information Security, Cybersecurity, Technology Governance, Internal Audit.
• Priority having professional certifications (like CISA, CISSP, CISM, CRISC, CDPSE, CEH, CompTIA, GIAC, etc.)
• English: TOEIC at least 550 or equivalent