Job Description

External Open Resourcing

Location: Malaysia (MY), Sarawak Energy (SEB)
Company: Sarawak Energy (SEB), Internal Audit (50034022), Corporate Functions & Risks (50034259).
Number of Openings: 1
Job Grade : Established
Closing Date: 28 September 2023

KEY ACCOUNTABILITIES:

• Develop risk based annual audit plan for Information Communication Technology Risks & Assurance Unit (ICTRA).
• Responsible to lead audit team to perform audits in accordance with International Professional Practice Frameworks (\xe2\x80\x9cIPPF\xe2\x80\x9d).
• Prepare audit plan for each engagement which comprises of planning memo, audit programs, preliminary review, budget, manpower allocation and timeline.
• Execute the audit plan effectively and efficiently, and ensure it adds value to the organisation.
• Ensure working papers are properly indexed, contains all relevant documents and evidence to support audit observations or issues highlighted in the audit report.
• Review working files, and coach, mentor and provide guidance to other audit staff.
• Conduct meetings with clients to discuss audit results, including internal control weaknesses identified and recommendations for improvements.
• Write clear and concise audit report.
• Conduct follow up audit on recommendations and agreed action plans with clients.
• Key contributor in IA transformation and continuous improvement initiatives, including leveraging the usage of technology, drive integrated analytics across the organisation and Internal Audit teams to provide a wholesome view of SEB Group Governance Risks and Controls (GRC) health check and establish an intervention plan.
• Perform investigation/special review under the direction of a Supervisor.
• Support a culture of fraud risk awareness at all levels of the organization.

SPECIAL ASPECTS / MAJOR CHALLENGES OF THE JOB:

• Keeping abreast with the latest development in the internal audit profession, business communities and industry practices.
• Identify emerging risks and determine its impact on the company\'s operations.
• Understanding of multiple technology domains including software development, Windows, database management, networking, and open-source platform.
• Understanding of information security standards, best practices for securing information systems, and applicable laws and regulations.
• Maintains knowledge with respect to relevant information technology trend, equipment, and/or cybersecurity threats.

QUALIFICATION & WORK EXPERIENCE:

• Degree in Computer Science or Information Technology from a recognized university, Institute of Higher Learning accredited by MQA.
• Minimum of 6-8 years relevant working experience, preferably in Information Security Compliance and audit.
• Additional professional qualification such as Certified Internal Auditor (\xe2\x80\x9cCIA\xe2\x80\x9d), Certified Information System Auditor (\xe2\x80\x9cCISA\xe2\x80\x9d) is an advantage.

TECHNICAL SKILLS:

• Outstanding interpersonal and communications skills; ability to communicate effectively with technical and non-technical audiences.
• Ability to select appropriate techniques to gather relevant information, apply problem-solving techniques to analyze and solve a complex situation.
• Identify the root causes of issues in the audit engagement.
• Knowledge of current technological developments/trends in the area of expertise.
• Knowledge of auditing concepts and principles.

LEADERSHIP COMPETENCIES:

• Fosters open communication with staff and clients.
• Collaborate with client to determine possible solutions to the issues raised in the audit report.
• Discuss audit findings and their impacts professionally and confidently with appropriate levels of people in the organizations.
• Puts people at ease and build open, constructive relationships with all parties.
• Maintain independence and objectivity in all situations.
• Proactive, agile and resourceful.
• High integrity.
• Independent and able to work under pressure.

Preference will be given to internal candidate.

Sarawak Energy