Description

Business Functions
Group Audit helps the Board and Executive Management meet the strategic and operational objectives of the DBS Group. We conduct independent checks to ensure that the Group's risk and control processes are adequate and effective. All our team members are highly sought-after professionals who work as trusted advisors to our clients, in all matters related to a company's internal controls.

Responsibilities

• Plan, lead, manage and execute regional and local audits covering areas of cybersecurity, IT infrastructure and application controls in accordance with department and professional standards
• Manage assignments locally and/or regionally efficiently and effectively including defining audit scope, risk matrices and testing strategy, and drafting audit working papers and reports
• Keep abreast of emerging issues in the relevant units under his/her audit portfolios.Perform ongoing risk and control assessment of the designated audit portfolios and take necessary actions to reflect/address material changes in the assessments
• Actively advise and apprise Audit management of all major risks, control and regulatory issues that impact the control environment of the Bank
• Manage key relationships with management of IT including relevant support units
• Provide recommendations, where appropriate, to enable that major concerns and recommendations raised by internal and external auditors, and regulators are resolved satisfactorily
• Participate in developing and managing the annual audit plan of relevant audit portfolios
• Guide and support other audit team members where necessary or appropriate
• Adhere to audit mandate, audit methodology, Institute of Internal Auditors (IIA) standards and relevant code of ethics, and regulatory requirements

Requirements

• Degree or above in information technology, computer science or equivalent disciplines
• Relevant professional qualifications, e.g. CISA, CISSP, CISM or equivalent, are preferred
• Minimum 10 years' working experience in IT audit or relevant technology experience, information security or cybersecurity field in banking industry / financial institution / technology / consulting field
• Knowledge and experience in cybersecurity and various platforms/ technologies including open systems, networks, cloud computing, DevOps, continuous integration / continuous delivery (CI/CD), blockchain and API etc.
• Solid knowledge of regulations (e.g. HKMA, SFC and MAS)
• Superior analytical skills and a strong sense of ownership, with data analytics and predictive modelling experience would be an advantage
• Solid reporting, presentation and communication skills in English. Good command of Chinese and Putonghua would be an advantage
• Willing to travel for overseas assignments
• Candidates with less experience will be considered as an Assistant Vice President

-en