This role is responsible for IT Audit for QSR Group, internal audit plans, audit fieldwork and audit report issued.
Responsibilities:
- Lead the planning, execution and reporting of Information Technology / Digital Audits covering the areas of technology infrastructure, information security, business applications system, digital platforms and significant projects.
- Examine IT internal controls, evaluate the design and operational effectiveness, determine exposure to risk, and develop remediation strategies.
- Review and assists in providing recommendations to respond to relevant system, applications and/or security breaches as and when required.
- Review pre, during and post system and applications implementation / projects as and when required.
- Conduct efficient and effective IT audit procedures.
- Communicate complex technical issues in simplified terms to the relevant staff.
- Review, evaluate, and test systems and applications controls.
- Provide recommendations and guidance on identified security and control risks.
- Develop a strong understanding of business and system processes.
Requirements:
Core elements in the IIA Global Internal Audit Competency Framework:
- Professional ethics: Promote and apply professional ethics
- Internal audit management: Develop and manage the internal audit function
- IPPF: Apply the International Professional Practices Framework (IPPF)
- Data Analysis: Use available tools to analyze data.
- Governance, risk and control: Apply a thorough understanding of governance, risk and control appropriate to the organization
- Business acumen: Maintain expertise of the business environment, industry practices and specific organizational factors
- Communication: Communicate with impact
- Persuasion and collaboration: Persuade and motivate others through collaboration and cooperation
- Critical thinking: Apply process analysis, business intelligence and problem-solving techniques
- Internal audit delivery: Deliver internal audit engagements
- Improvement and innovation: Embrace change and drive improvement and innovation
Understand and keep abreast with the following guidelines:
- Internal Audit Charter
- The IIA's International Professional Practices Framework (IPPF)
Skills Requirement:
- Comprehensive understanding of internal control environments within the IT function.
- Experience with multiple technology domains including aspects of Windows, and/or database administration, software development and networking.
- Understanding of information security standards, best practices for securing computer systems, and applicable laws and regulations.
- First degree in any field or Bachelor's degree in Accounting, Finance, Computer Science, IT Risk Management/Governance, Business Admin.
- Relevant professional certification such as CIA (Certified Internal Auditor), CCSA (Certification in Control Self-Assessment), CRMA (Certification in Risk Management Assurance), CISA (Certified Information System Auditor), CFE (Certified Fraud Examiner) is desired.
- Minimum 10 years of audit experience, preferably in multinational companies, GLC, public listed companies or recognized audit firms
- Exposure to risk-based auditing, control self-assessment and risk management system is preferred.