Deputy Manager, Internal Audit

About the role

This role contributes to the development of the risk-based annual audit workplan and reports progress and recommendations to the Audit & Risk Committee on a quarterly basis. It covers audit engagements across business operations, procurement, project management, asset management, leases, facilities management, revenue collection and other key functions, assessing risks, controls and compliance.

Key responsibilities

• Evaluate the adequacy and effectiveness of governance, risk management and internal control frameworks.
• Perform audit testing and data analysis, identify control weaknesses and root causes, and produce quality audit reports with practical recommendations.
• Monitor and follow up on audit findings to ensure timely corrective action.
• Use data analytics and technology tools to extract and analyse data from enterprise systems, identifying trends, anomalies and emerging risks.
• For candidates with IT audit experience, assess IT governance, cybersecurity controls, systems, applications and technology risks.
• Communicate with stakeholders at operational, management and board levels, support risk assessment, advisory engagements and whistleblower investigations, and contribute to continuous improvement in the Internal Audit function.

Required profile

• Degree in Accountancy, Finance, Business, Information Systems or a related discipline.
• Professional qualification such as CIA, ACCA, CA, CPA or CISA; ERM, CFE, BCM or similar certifications are a plus.
• Minimum 5 years of experience in internal audit, risk management, compliance or related functions, including at least 2 years in audit; an Information Systems background is an advantage.
• Strong understanding of governance, risk management, internal controls and audit methodologies.
• High level of integrity, independence and professional scepticism; strong written and spoken English, with Mandarin or Bahasa Indonesia a plus.

Required skills

• Data analytics tools (Excel, SQL, Python, R, ACL, IDEA) and audit management systems (TeamMate+, AutoAudit, Pentana) are advantageous.
• IT audit, cybersecurity, fraud investigation, enterprise risk management or business continuity management experience is a plus.
• Strong communication, stakeholder management, analytical, report-writing and problem-solving skills.