Deputy Manager, Internal Audit

• Contribute to the development of the risk-based annual audit workplan and report progress and recommendations to the Audit & Risk Committee (ARC) on a quarterly basis.
• Independently plan and execute audit engagements across business operations, procurement, project management, asset management, leases, facilities management, revenue collection, and other key functions — assessing risks, controls, and compliance.
• Evaluate the adequacy and effectiveness of governance, risk management, and internal control frameworks.
• Perform audit testing and data analysis; identify control weaknesses and root causes; produce quality audit reports with practical, value-added recommendations.
• Monitor and follow up on audit findings to ensure timely implementation of corrective actions.
• Leverage data analytics and technology tools to extract and analyse data from enterprise systems, identifying trends, anomalies, and emerging risks for audit planning and fieldwork.
• For candidates with IT audit experience: assess IT governance, cybersecurity controls, systems, applications, and technology risks.
• Engage and communicate effectively with stakeholders at operational, management, and board levels.
• Support risk assessment activities, advisory engagements, and whistleblower investigations.
• Contribute to continuous improvement initiatives within the Internal Audit function and provide value-added advisory services to business units.

The Requirement

• Degree in Accountancy, Finance, Business, Information Systems, or a related discipline.
• Professional qualification such as CIA, ACCA, CA, CPA, or CISA; ERM, CFE, BCM, or other related certifications are a plus.
• Minimum 5 years of experience in internal audit, risk management, compliance, or related functions, including at least 2 years in audit; a background in Information Systems is an advantage.
• Strong understanding of governance, risk management, internal controls, and audit methodologies.
• Experience with data analytics tools (Excel, SQL, Python, R, ACL, IDEA) and audit management systems (TeamMate+, AutoAudit, Pentana) is advantageous.
• IT audit, cybersecurity, fraud investigation, enterprise risk management, or business continuity management experience is a plus.
• Strong communication, stakeholder management, analytical, report-writing, and problem-solving skills.
• High level of integrity, independence, and professional scepticism; strong written and spoken English, with Mandarin or Bahasa Indonesia as a plus.