Specialist Information Technology Auditor - บริษัท โรงพยาบาลบำรุงราษฎร์ จำกัด (มหาชน)

·         Lead and contribute in audit planning in order that the Corporate Internal Audit Division achieves its mandate and covers the high-risk areas relevant to Information Technology.

·         Execute audit plan, as approved, including as appropriate any special task or projects requested by the Audit Committee and/or management.

·         Assess AI Governance, IT Governance, Cybersecurity, IT General Controls (ITGCs), application controls, cloud environments, third-party and compliance risks.

·         Review the adequacy and effectiveness of the organization’s system of internal controls, reliability and integrity of financial and operating information, and compliance with the policies, plans, procedures, laws and regulations.

·         Supervise and support the Corporate Internal Audit  team members to comprehensively assess the concerned risks and ensure the quality of IA documentation and deliverables.

·         Prepare clear and accurate audit reports with practical recommendations to strengthen controls and mitigate risks.

·         Monitor management action plans and validate remediation of audit findings.

·         Apply tools to enhance audit efficiency and effectiveness.

·         Male or female, age 30-35 years

·         Bachelor’s Degree or higher in IT, Information systems, Computer Science, Engineering, Accounting, Business Administration or related fields.

·         Minimum 3 years’ work experience in IT audit function (external or internal) or IT compliance/ IT risk management/ IT security

·         Strong testing experience on IT controls e.g., IT governance, cybersecurity, SDLC and change management, network security covering configuration management, etc.

·         Relevant professional certificate e.g. Certified Internal Auditor, Certified Information Systems Auditor, etc.

·         Very good command of English, both written and spoken, with TOEIC score of 850-990

·         Good knowledge of IT laws, such as Computer Crime Act, Electronic Transactions Act, Cyber Security Act and Personal Data Protection Act

·         Work experience in healthcare business or other business in service industry is preferable

·         Good computer skills in MS Office

·         Good analytical, communication and interpersonal skills