Information Technology Auditor

Company Description Bangchak Corporation Public Company Limited is a leading Thai energy company that combines commercial success with social and environmental stewardship. The organization focuses on innovation-driven businesses that enhance national energy security and support long-term sustainability for both the company and Thai society. Established as a state enterprise in 1984, Bangchak has been publicly traded since 2001, offering a stable and transparent corporate environment. The company operates across five main business lines from upstream to downstream, supported by the Bangchak Initiative and Innovation Center, creating opportunities for professionals to contribute to impactful energy solutions.

Role Description The Information Technology Auditor is responsible for evaluating and improving the effectiveness of IT controls, systems, and processes across Bangchak's business units. This full-time hybrid role is based in Bangkok City, Thailand, with flexibility for some work-from-home arrangements. Day-to-day tasks include planning and executing IT audits, assessing compliance with internal policies and relevant standards, and identifying risks related to information technology and information security. The role involves analyzing system configurations and control environments, documenting findings, preparing clear audit reports, and collaborating with cross-functional teams to recommend practical remediation actions. The IT Auditor also supports continuous improvement initiatives by monitoring implementation of audit recommendations and contributing to the development of IT governance frameworks and best practices.

Qualifications

• Candidates should possess strong IT Audit skills, including experience in planning, executing, and reporting on technology-focused audits.
• Candidates should possess knowledge of IT Controls and Information Technology, including systems, infrastructure, applications, and related governance frameworks.
• Candidates should possess Information Security skills, with an understanding of security principles, standards, and risk management practices.
• Candidates should possess solid Analytical Skills, including the ability to interpret complex data, assess risks, and draw clear, evidence-based conclusions.
• Relevant bachelor's degree in Information Technology, Computer Science, Accounting, or a related field; professional certifications (e.g., CISA, CISSP, CIA) are an advantage.
• Experience with audit methodologies, risk assessment, and regulatory or industry standards (such as ISO 27001, COBIT, or ITIL) is beneficial.
• Strong written and verbal communication skills, with the ability to present findings to technical and non-technical stakeholders.
• Ability to work independently and collaboratively in a hybrid environment, with strong organizational skills and attention to detail.