Assistant Manager, IT Internal Control
2 months ago
Key ResponsibilitiesSupport the design, implementation, and continuous improvement of IT General Controls (ITGC) and IT controls supporting business o.....
Key Responsibilities
- Support the design, implementation, and continuous improvement of IT General Controls (ITGC) and IT controls supporting business operations (e.g., ITACs, IPEs, EUCs).
- Maintain and oversee the IT Risk Control Matrix (RCM) and collaborate with stakeholders to ensure effective control ownership and execution.
- Assist in managing the IT Internal Control Framework, including planning, testing, and reporting of IT process risks and control gaps to provide assurance to stakeholders.
- Partner with internal teams to identify control gaps and recommend process improvements to enhance operational efficiency and effectiveness.
- Collaborate with risk and compliance functions to support initiatives that strengthen IT risk management practices in line with organizational standards and industry best practices.
- Provide guidance to stakeholders on IT and information security controls and obligations.
- Support the coordination and delivery of IT risk and controls awareness or training sessions.
- Assist in IT audits and regulatory reviews, including preparation of documentation and responses to information requests.
- Prepare periodic and ad-hoc reports for management and relevant stakeholders.
- Contribute to process improvements, including opportunities for automation and efficiency enhancements.
Key Requirements
- Degree in Computer Science, Information Technology, Information Systems, Computer Engineering, Accountancy, Business, or related disciplines, or equivalent practical experience.
- At least 5 years of relevant experience in IT governance, risk, or internal controls, including exposure to IT control frameworks.
- Working knowledge of system development lifecycle, IT controls, and information security principles.
- Ability to learn new technologies and methodologies in a dynamic environment.
- Strong analytical, problem-solving, communication, and stakeholder management skills.
- Good organizational and report-writing skills with attention to detail.
- Professional certifications (e.g., CISA, CISSP, CCSP) are advantageous but not mandatory.
Official account of Jobstore.
