Associate - IT Risk Assurance Services

- Workclosely with the Audit team to perform assessments of the technical and general IT controls, infrastructure security, database security and business process/application controls

- Deliver IT risk management, controls and process advisory projects for our clients

- Work closely with the IT Risk Assurance and Cybersecurity team to perform the following:

+ Execute network, application and operation system vulnerability assessments

+ Use automated tools (e.g. Nessus) to pinpoint vulnerabilities and reduce time-consuming tasks

+ Manually validate report findings to reduce false positives

+ Develop requirements for local area networks (LANs), wide area networks (WANs), virtual private networks (VPNs), routers, firewalls, IDS and related network devices

+ Continuously research new technology infrastructure, cyber security trends and security architecture changes, security standards, security systems and authentication protocols

+ Execute source code reviews (analyse source code on a line-by-line basis)

+ Prepare and communicate working schedules to clients

+ Identify, analyse and discuss with audit clients the IT audit risks they face and propose recommendations

+ Document working papers in a timely manner

+ Prepare management letters for audit clients or final reports for advisory clients

+ Assist in marketing and business development, including making proposals and meeting prospective clients

- Experience in IT controls, or risk management, accounting or business

processes, or system implementation, or IT project assurance

- Experience in ERP reviews, audits or implementation or advisory roles in areas such as SAP, Oracle, JDE, Dynamics or Peoplesoft will be an advantage

- Intermediate coding experience or use of data technology such as SQL, Alteryx, Celonis, Power BI or Python will be an advantage

- Good interpersonal skills and reasonable command of English and Vietnamese language