About this role
<p style="margin:0.0in;Times New Roman', serif"><span style="">Internal Audit Department of SMBC is responsible for examining the overall internal control system including the effectiveness and efficiency of operations and compliance with applicable laws and regulations.</span></p> <p style="margin:0.0in;Times New Roman', serif"> </p> <p style="margin:0.0in;Times New Roman', serif"><span style="">Internal Audit Department, Asia Pacific Division</span><span style=""> (IAD</span><span style="">AP) </span><span style="">conducts internal audits of the operations of all SMBC units and departments. The IADAP team which is based in Singapore, is primarily responsible for the audits of SMBC units and activities in Asia Pacific region. The team may also be called upon to support audits conducted in the other regions.</span></p><p style="text-align:justify;margin:0.0in;Times New Roman', serif"><span style="">As a regional Information Technology (IT) auditor, you will add value and improve the Bank’s IT and Information Security (IS) activities by bringing an efficient and disciplined approach to the effectiveness of governance, risk management and control processes. You will travel and work closely with internal audit counterparts on a regional scale to conduct audit visits. You will have the opportunity to work with the stakeholders to evaluate internal controls and providing recommendations to strengthen these processes. As a specialised IT auditor, you will play a critical role in promoting a strong risk management culture and improving the technology and security control environment across the Asia Pacific region.</span></p> <p style="text-align:justify;margin:0.0in;Times New Roman', serif"> </p> <p style="text-align:justify;margin:0.0in;Times New Roman', serif"><strong><u><span style="">Job Responsibilities</span></u></strong></p> <p style="text-align:justify;margin:0.0in;Times New Roman', serif"> </p> <ul> <li style="text-align:justify;Times New Roman', serif"><span style="">Lead and/or execute audits independently and efficiently, which includes audit planning, fieldwork, reporting and, issue follow-up and closure. </span></li> <li style="text-align:justify;Times New Roman', serif"><span style="">Conduct the audit activites in accordance with the Bank's internal audit methodology.</span></li> <li style="text-align:justify;Times New Roman', serif"><span style="">Assess the Bank's IT and IS internal control environment with view to provide value-adding recommendations to Management to address emerging issues or remediate identified weaknesses.</span></li> <li style="text-align:justify;Times New Roman', serif"><span style="">Apply data analytics to assess the internal control environment.</span></li> <li style="text-align:justify;Times New Roman', serif"><span style="">Establish and develop good working relationships with Management of assigned IT and IS departments, for which the candidate has been assigned risk assessment responsibilities.</span></li> <li style="text-align:justify;Times New Roman', serif"><span style="">Contribute to the annual risk assessment exercise by developing a good understanding of the business strategy, plans, products, processes, performance, risks, and issues of the assigned IT and IS departments across the region.</span></li> <li style="text-align:justify;Times New Roman', serif"><span style="">Perform continuous monitoring on IT and IS activities across the region, to keep abreast on evolving markets, regulatory, business and operational changes to drive appropriate ongoing audit coverage.</span></li> <li style="text-align:justify;Times New Roman', serif"><span style="">Participate in the team’s strategic initiatives and projects as opportunities arise.</span></li> </ul> <p style="text-align:justify;margin:0.0in;Times New Roman', serif"> </p> <p style="text-align:justify;margin:0.0in;Times New Roman', serif"><strong><u><span style="">Job Requirements</span></u></strong></p> <p style="text-align:justify;margin:0.0in;Times New Roman', serif"> </p> <ul> <li style="text-align:justify;Times New Roman', serif"><span style="">Minimum of 6 years of experience in IT/IS audits, preferably in the banking environment.</span></li> <li style="text-align:justify;Times New Roman', serif"><span style="">Familiar with execution of risk-based audits.</span></li> <li style="text-align:justify;Times New Roman', serif"><span style="">Familiar with technology risk management.</span></li> <li style="text-align:justify;Times New Roman', serif"><span style="">Certified Information Systems Auditor</span></li> <li style="text-align:justify;Times New Roman', serif"><span style="">Certified Information Systems Security Professional or equivalent preferred.</span></li> <li style="text-align:justify;Times New Roman', serif"><span style="">Familiar with the regulatory requirements specific to technology risk management and cyber security across the Asia Pacific region (e.g. Monetary Authority of Singapore, Reserve Bank of India, Bank of Thailand).</span></li> <li style="text-align:justify;Times New Roman', serif"><span style="">Proficient in both spoken and written English.</span></li> <li style="text-align:justify;Times New Roman', serif"><span style="">Good interpersonal and stakeholder management skills.</span></li> <li style="text-align:justify;Times New Roman', serif"><span style="">Good team player as well as able to work independently.</span></li> <li style="text-align:justify;Times New Roman', serif"><span style="">Meticulous, disciplined and self-motivated individual with the passion to pursue excellence.</span></li> </ul>