Audit: Asia Technology Audit

This is an exciting opportunity to join the Technology Audit Team. Our Internal Audit Department is an independent function accountable to the Audit Committee, the Board of Directors, senior management, and our global and local regulators. With auditors located in key locations across the globe, we assess the adequacy of control environments across our businesses. Using audit technology, data, methodology, and sound judgement, we bring a systematic and disciplined approach to evaluating and improving the effectiveness of governance, risk management, and controls. You will grow your skills through continuous learning, stretch assignments, and exposure to a broad range of technology and cybersecurity risk topics.

As a Technology Audit Analyst (Analyst) within Asia Technology Audit, you collaborate with cross-functional stakeholders and audit teams to execute technology audits across Asia locations, bringing a strong risk and control mindset, analytical rigor, and professional skepticism. You will be comfortable challenging and engaging management on technology and cybersecurity risks and control effectiveness, while building trusted relationships in a collaborative, fast-paced, global environment. We’re looking for individuals who enjoy learning about audit, businesses, and functions; applying innovative thinking to enhance audit execution; and continuously developing their skills. This role reports to the Asia Technology Audit Lead.

You will support regional audit coverage through Asia-focused and global audit activities and help provide continuous monitoring over key technology programs by building and maintaining strong stakeholder relationships with technology leaders and relevant control groups.

Job responsibilities

• Partner with business and technology audit colleagues to identify and assess key risks within the audit coverage plan
• Support adequate and complete audit coverage for the Asia Pacific region through regional and global audit activities
• Execute audit activities in accordance with our internal audit methodology, including audit planning, walkthroughs, testing, control evaluation, report drafting, and follow-up/validation of issue remediation
• Deliver assigned audit work to high professional standards, with efficiency and strong attention to detail
• Produce high-quality audit documentation (workpapers and reporting) with minimal review notes
• Evaluate, test, and report on the adequacy and effectiveness of controls, and provide clear, practical recommendations for control improvements
• Provide continuous monitoring over key technology programs by developing and maintaining strong stakeholder relationships with technology leaders and relevant control groups
• Stay current on evolving industry practices and regulatory expectations impacting the regional technology environment
• Take ownership of professional development through stretch assignments, continuous learning, and proactive skill-building

Required qualifications, capabilities, and skills

• Bachelor’s degree in Technology (or related discipline) with at least 3 years of relevant internal or external auditing experience
• CISA and/or CISSP certification
• Strong understanding of technology and cybersecurity control domains, with the ability to apply risk management concepts to evaluate risks and controls
• Familiarity with Asia Pacific technology and cybersecurity-related laws and regulations
• Familiarity with emerging technologies and control practices (e.g., cloud, artificial intelligence, and machine learning)
• Strong analytical skills and ability to use data analytics to enhance audit testing efficiency, coverage, and continuous monitoring
• Familiarity with tools such as Alteryx, SQL, Power BI, Python, Excel, QlikView, Tableau, or similar
• Excellent written and verbal communication skills, including the ability to explain complex and sensitive topics clearly to senior management and influence change (shortlisted candidates may be asked to complete a scenario-based written assessment)
• Strong collaboration skills and ability to work effectively both independently and as part of a team across regions and disciplines
• Self-motivated, accountable, adaptable under pressure, and able to manage changing priorities and multiple deliverables

Preferred qualifications, capabilities, and skills

• Additional relevant certifications (e.g., CRISC or CISM) and Public cloud certifications
• Experience assessing technology and cybersecurity-related laws and regulations across Asia Pacific markets
• Experience evaluating cloud controls, cybersecurity controls, and technology risk management practices
• Experience using data analytics to support audit testing and continuous monitoring in large, complex environments
• Exposure to audit technology and innovation approaches that enhance audit execution efficiency and insight