Vice President - IT Audit - Agile & SDLC Methodology

IT audit team undertakes Information Technology (IT) audits across the Group. IT Audit is responsible for providing independent evaluation of internal controls for all IT operations, applications and projects.

Principal Responsibilities:

- Undertake risk assessment, control design review and lead local/regional audits of IT architecture, business application development and maintenance and technical infrastructure as part of various global, regional and local IT audits.

- Provide consultancy services to IT and business management and other Internal Audit teams, covering IT strategy, architecture, security, risks and controls.

- Based on audit work, draft value-adding audit findings articulating key issues, risks, root causes and action plans.

- Produce high quality audit reports for review by senior audit management.

- Compliance with Global audit standards while undertaking the audit activities.

- Develop/maintain audit packages for new technology, applications and regulatory requirements.

- Develop and maintain strong relationship with the IT management.

- Maintain leading edge knowledge of best practice within audit, financial services and in the risk environment.

Qualifications/Requirements :

- Degree or equivalent qualification.

- Strong experience in IT Auditing, IT security, IT architecture, application development and maintenance, business analyst, quality assurance, internal control/operational risk or IT operations with a minimum 8 years experience, in at least one of these areas.

- Working experience on Agile and SDLC methodology (Must)

- An in-depth understanding of the application systems architecture and strategic risks.

- A broad understanding of the financial services industry and associated regulatory environment.

- Strong technical aptitude, excellent control concept and ability to assess risks.

- Good written and verbal communication skills, analytical, problem-solving and interpersonal skills.

- Professional qualifications such as, CISA, CISSP, CISM, CGEIT, ITIL, ACA or PMP preferred.