IT Audit

IT Audit role at Kiatnakin Phatra Bank (KKP), providing IT audit services (assurance and advisory) for Kiatnakin Phatra Financial Group. Responsibilities include performing end-to-end audit assignments, ensuring quality and timeliness of audit services, managing relationships with audit clients and regulators, assisting in developing the annual risk-based audit plan, and collaborating with non-IT audit teams as part of an integrated audit function.

Qualifications include a Bachelor's degree or higher in IT, Computer Engineering/Science, MIS/AIS, or related fields, at least 5 years of IT audit/IT risk & controls experience with team supervision, and experience in banking or financial services. Hands-on experience reviewing IT general and application controls, familiarity with data analytics tools, and knowledge of IT-related regulations (BOT, SEC) and standards (ISO27001, COBIT, ITIL, NIST, OWASP) are required.

Perform audit assignments from end-to-end (planning, execution, reporting, follow-up) according to the annual audit plan and communicate significant findings to Senior Management

Ensure quality and timeliness of audit services, including effective planning, resource management, root-cause analysis, and practical recommendations

Assist in managing professional relationships with audit clients and stakeholders such as regulators

Assist in developing and updating the annual audit plan using a risk-based audit approach

Work closely with other audit teams as part of an integrated audit team and ensure harmonization among teams

Bachelor's degree or higher in IT, Computer Engineering/Science, MIS/AIS, or related fields

At least 5 years of experience in IT Audit/IT Risk & Controls, IT Security, or related fields, with experience managing end-to-end audits and supervising team members

Experience in Banking and other Financial Services industries and/or Big4 firms focused on these industries

Hands-on experience reviewing IT general and application controls, including IT infrastructure and new technologies (OS, middleware, database, network, web/mobile apps, API, biometric, cloud)

Familiarity with IT-related regulatory requirements (e.g., BOT, SEC) and standards such as ISO27001, COBIT, ITIL, NIST, OWASP