Senior Information Technology Auditor

About The Team
Sea Limited (NYSE: SE) is a leading global consumer internet company founded in Singapore in 2009. Our mission is to better the lives of consumers and small businesses with technology.

We operate three core businesses across digital entertainment, e-commerce, as well as digital payments and financial services, known as Garena, Shopee, and SeaMoney, respectively. Garena is a leading global online games developer and publisher. Shopee is the largest pan-regional e-commerce platform in Southeast Asia and Taiwan. SeaMoney is a leading digital payments and financial services provider in Southeast Asia.

Job Description
The IT Audit Senior Specialist is responsible for the key IT audit activities, including driving the development, execution and reporting of the annual risk-based IT audit plan. The role also serves to support the Group Internal Audit (GIA) function in communications with management, external auditors and consultants regarding IT internal audit related matters.

• Support the development of annual IT audit plans for IT specific areas and integrated audits with business auditors, where relevant.
• Support GIA in the delivery and execution of IT Audits (e.g., Cybersecurity, Business Continuity/Disaster Recovery audits etc.) by applying risk analysis skills, use of data analytics, professional judgement, inspection of documents and process understanding with stakeholders, where relevant.
• Ensure that IT audits are completed in a timely and efficient manner in accordance with standards established by industry best practices and the relevant risk and regulatory environment
• Communicate root causes of identified issues, associated risks, including recommendations for improvements in business processes, on the current and future business model and operating environment and ensure that actions plans are properly implemented by management
• Deliver high quality audit reports in a timely manner with audit issues focused on key risks, root causes, materiality, potential solutions and succinct messages
• Ensure timely reporting of all audit statuses, including current activities, next steps and roadbocks to GIA
• Support GIA in communications with management, external auditors consultants regarding IT internal audit related matters
• Collaborate with stakeholders to identify potential red flags and ensure that insights to emerging risk and controls are identified and managed
• Build trust and credibility with stakeholders in order to objectively engage them and where appropriate, challenge their views and support senior management in achieving their business objectives
• Support the GIA with ad-hoc projects /special audit work as assigned

Requirements

• Minimum 3 years of IT audit, risk and control experience required
• Degree in Computer Engineering, Computer Science, Accountancy, Business or related studies
• Candidates with Certified Information System Auditor (CISA) certification, Certified Information Systems Security Professional (CISSP), Certified Internal Auditor (CIA) or equivalent will be of added advantage
• Experienced in leading IT risk-based audits (e.g., IT Application Controls and IT General Controls), teams, interacting with key stakeholders and managing negotiation situations
• Good experience in IT Security Governance, Risk Management and Compliance
• In-depth knowledge of BSP Guidelines will be of added advantage
• In-depth knowledge of COBIT or similar standards is a must
• Strong interpersonal skills and ability to collaborate and influence both internal and external stakeholders
• Proven ability to work cross functionally and influence organization to accomplish goals
• Team player, focused, passionate, with ability to inspire confidence in employees and senior management
• Willingness and ability to adapt to new circumstances, information, and challenges
• Excellent written and verbal communication skills
• Ability to work both independently with sole responsibility and as part of a regional team to deliver quality work product in a fast-paced environment