Senior Auditor, IT (Digital Infrastructure)

This position involves performing assigned audit engagements in Digital Infrastructure from start to finish, ensuring the application of risk and control concepts to scenarios encountered. The role includes identifying potential issues within the company and Group Companies and contributing as a Subject Matter Expert (SME) in periodic Risk Assessments and the development of Risk-Based Work Plans. The focus is on Infrastructure Security, including Network, Cloud, Systems, and Databases, as well as conducting vulnerability assessments and penetration testing.

Key Accountabilities

• Develop the audit universe to cover Digital Infrastructure and cybersecurity risks in line with other D&T risk areas.
• Conduct audits, advisory engagements, and other activities in technical areas of current/emerging technologies within the company and Group Companies.
• Prepare audit reports that conclude with professional opinions on risk management adequacy and control effectiveness.

Minimum Qualifications

• Bachelor's Degree in Computer Science or a related Technology discipline.

Minimum Experience, Knowledge & Skills

• 8-10 years of relevant experience in D&T or IT internal auditing, with at least 5+ years in Digital Infrastructure and cybersecurity.
• Advanced technical knowledge of infrastructure components, network security, various operating systems, databases, virtualization technologies, and security operations.
• Hands-on experience in conducting vulnerability assessments and penetration testing.

Professional Certifications

• IT audit certification (CISA) is mandatory or must be obtained within one year of joining.
• Preferred certifications include GIAC, CISSP, OSCP, CISM, etc.
• Desirable technical certifications include CCNA, CCIE, Azure, CCSK/CCSP, GPEN, etc.