Overview
A primary focus for this position will be to lead audit execution covering end-to-end processes of auditable entities within the IT and Cybersecurity Inspection Generale APAC team.
Responsibilities
This individual will work closely with audit assignment team members to complete each phase of the audit. This will entail:
· assessing the sufficiency and suitability of controls to mitigate risks; and
· testing the operating effectiveness and sustainability of controls; and
· documenting walk-throughs of in-scope processes; and
· documenting the investigations conducted and their results; and
· drafting findings and associated recommendations to address identified gaps in the control environment; and
· documenting the final report.
This individual will have regular interactions with team members, process / control owners, and management of business units. Based on experience, this role will entail contributing to IT audits.
Duties:
· Demonstrates a strong ability to audit procedures and controls accurately, timely, and with minimal supervision.
· Executes audit work in accordance with BNPP Inspection Generale policies and procedures.
· Testing the control design and operating effectiveness of in-scope IT controls
· Contributes to the completion of continuous monitoring activities for assigned auditable entities and escalates matters that may impact the timing of the next audit assignments.
· Prepares and updates risk assessments for assigned auditable entities for supervisory review.
· Validates the sufficiency and suitability of business corrective actions to address audit recommendations.
· May be asked to direct the work of more junior staff members on the audit assignments.
· Performs other duties as assigned.
Technical & Behavioral Competencies
· Deep knowledge of IT audit
· Requires deep knowledge of banking functions typically obtained through advanced education combined with experience.
· Exhibits effective written and verbal communication skills with all levels of management (in English)
· Not less than 10 years of experience in IT external auditing / internal auditing / in the financial services industry.
· Curiosity, rigor, and precision.
· Outstanding analytical skills
· High level of initiative, commitment, and drive
· Ability to work effectively under pressure and within short deadlines
· Promotes a constructive, cooperative, and participative teamwork environment
Specific Qualifications (if required)
· Possess a Bachelor’s / Master’s Degree in Information Technology/ Management Information System / Computer Science and related discipline;
· Professional Qualification/Certification: in IT Audit - CISA (Certified Information System Audit) - required
other IT certification: Cybersecurity (e.g CISSP, CISM, CCSP/CCSK, CEH…), IT Service Management (ITIL foundation).