Internal Audit Manager (IT and Non-IT)

Responsibilities

• Develop and execute the annual risk-based internal audit plan covering IT and Non-IT audits, including operational, financial, compliance, business process, and information technology audits.
• Assess business processes, IT systems, and internal controls to identify key risks, control deficiencies, and opportunities for improvement.
• Conduct IT audits covering IT general controls (ITGC), access management, change management, IT operations, cybersecurity, and system-related controls, as applicable.
• Conduct Non-IT audits covering business operations, financial processes, regulatory compliance, corporate governance, and internal control effectiveness.
• Evaluate the design and operating effectiveness of internal controls and recommend practical solutions to mitigate risks and strengthen the control environment.
• Prepare audit working papers, document supporting evidence, summarize audit findings, and develop clear, actionable recommendations.
• Prepare and present internal audit reports to the Chief of Internal Audit, Audit Committee, Management, and relevant business stakeholders.
• Monitor management action plans and follow up on the implementation of corrective actions to ensure identified issues are appropriately addressed.
• Coordinate with regulators, external auditors, and relevant stakeholders on internal audit matters and regulatory requirements.
• Maintain compliance with applicable internal audit standards, professional ethics, and relevant regulatory requirements.
• Perform ad hoc reviews, special investigations, and other assignments as requested by management.

Qualifications

• Bachelor's degree in Accounting, Finance, Information Technology, Computer Science, or a related field.
• Minimum 5–7 years of experience in Internal Audit, preferably within banking, securities, financial services, fintech, or digital asset businesses.
• Demonstrated experience in both IT Audit and Non-IT Audit, with the ability to assess technology-related risks as well as operational, financial, and compliance controls.
• Strong understanding of IT general controls (ITGC), information security controls, business process controls, risk management, and regulatory compliance.
• Proven ability to develop audit plans, lead audit engagements, identify control gaps, and provide practical recommendations for risk mitigation.
• Experience in preparing audit reports, presenting findings to senior management, and coordinating with external auditors and regulators.
• Strong analytical, problem-solving, communication, and stakeholder management skills.
• Ability to manage multiple assignments, work under pressure, and operate independently.
• Professional certifications such as CIA, CISA, or CISM are an advantage.

To ensure professional integrity and compliance with regulatory requirements, all selected candidates are responsible for providing documentation for a comprehensive background check. Depending on the role, this may include:

• Criminal Record Disclosure
• Credit Bureau Report
• Professional Due Diligence & Employment Verification

These checks are conducted after the interview stage and prior to your start date to verify qualifications and suitability for employment. The company shall review all findings fairly and in accordance with applicable laws. Should any information in your report lead to a potential adverse employment decision, the company shall follow the necessary processes before a final determination is made.