IT Technical Audit

IT Technical Audit role at Kiatnakin Phatra Bank Public Company Limited, providing IT Audit services (both assurance and advisory) for Kiatnakin Phatra Financial Group. The position is based in Bangkok within the Legal/Compliance/Audit function, performing end-to-end audit assignments and coordinating with stakeholders including regulators.

The role requires at least 5 years of experience in IT Audit, IT Risk & Controls, or IT Security, with experience managing end-to-end audit activities and supervising team members. Candidates should have hands-on experience reviewing IT general and application controls, familiarity with IT-related regulatory requirements such as BOT and SEC, and relevant certifications such as CISA or CISSP being a plus.

Perform audit assignments from end-to-end (planning, execution, reporting, follow-up) according to the annual audit plan and communicate significant audit findings to Senior Management

Ensure quality and timeliness of audit services including effective planning, resource/timeline management, identifying potential findings, root-cause analysis, and providing practical recommendations

Assist in managing professional relationships with audit clients and stakeholders including regulators

Assist in developing/updating annual audit plan using a risk-based audit approach

Work closely with other audit teams (e.g., non-IT auditors) as part of an integrated audit team and ensure harmonization among teams

Bachelor's degree or higher in IT, Computer Engineering/Science, MIS/AIS, or any related fields

At least 5 years of work experience in IT Audit/IT Risk & Controls, IT Security, or related fields, including managing end-to-end audit activities and supervising team members

Hands-on experience reviewing IT general and application controls including IT infrastructure, operating systems, middleware, databases, networks, web/mobile applications, API, biometric, and cloud

Familiarity with IT-related regulatory requirements (e.g., BOT, SEC) and basic knowledge of standards such as ISO27001, COBIT, ITIL, NIST, OWASP

Relevant professional certifications (e.g., CISA, CISSP, CISM, ISO/IEC 27001 Lead Auditor) would be a plus