VP, Internal Audit (Technology Audit Focus)

About the role

The incumbent supports the Head of Internal Audit in leading the regional internal audit function, with a strong focus on technology, IT controls and technology-related risks across multiple jurisdictions. The role oversees audit planning, execution and reporting across regional entities, covering both business and technology risks, including IT audits of enterprise systems, ITGC, cybersecurity, network vulnerabilities, application controls and technology-related regulatory compliance.

Key responsibilities

• Support the Head of Internal Audit in developing the regional risk-based audit plan and conduct enterprise-wide risk assessments, identifying and prioritising technology risk areas
• Lead and oversee IT audits, including evaluation of ITGC (access, change, operations, backup and recovery, SDLC), cybersecurity, network vulnerabilities and application controls
• Assess technology controls against regulatory requirements, company security policies and industry best practices, and evaluate data governance, data security and access to sensitive information
• Oversee follow-up and remediation of technology-related audit findings
• Oversee regional audit execution, including integrated audits combining business, financial and IT controls, and review workpapers, findings and reports
• Ensure audits comply with IIA standards and monitor audit quality and consistency across the region
• Prepare audit reports, present technology and cybersecurity risks to senior management and the Audit Committee, and liaise with external auditors, regulators and compliance functions
• Partner with senior management, IT, information security, risk, compliance and functional heads, acting as delegate for the Head of Internal Audit when required
• Lead and mentor the internal audit team, support recruitment, training and professional development, and promote consistent audit practices
• Drive improvements in audit analytics, continuous monitoring, automation and technology-enabled audit techniques, and keep abreast of emerging technology and regulatory risks

Required profile

• Degree in Accounting, Finance, Information Technology, Computer Science, Business or a related discipline
• At least 6 years of relevant experience in internal audit, IT audit, technology risk, IT controls or assurance, with significant exposure to technology and IT risk
• Strong experience in IT audit and technology controls, including ITGC, enterprise systems, applications, cybersecurity and network controls
• Experience leading integrated audits combining business process and IT controls
• Exposure to multi-jurisdictional regulatory environments, preferably across Asia; regular travel to Asian countries will be required

Required skills

• Certifications such as CISA, CIA, CISM, CRISC or equivalent are preferred
• Experience assessing internal controls against regulatory requirements, company security policies and industry best practices
• Experience preparing audit reports and presenting findings to senior management and the Board/Audit Committee
• Ability to manage complex cross-border audit engagements