Deputy Manager, Internal Audit

The Job Contribute to the development of the risk-based annual audit workplan and report progress and recommendations to the Audit & Risk Committee (ARC) on a quarterly basis. Independently plan and execute audit engagements across business operations, procurement, project management, asset management, leases, facilities management, revenue collection, and other key functions — assessing risks, controls, and compliance.

Evaluate the adequacy and effectiveness of governance, risk management, and internal control frameworks. Perform audit testing and data analysis; identify control weaknesses and root causes; produce quality audit reports with practical, value-added recommendations. Monitor and follow up on audit findings to ensure timely implementation of corrective actions.

Leverage data analytics and technology tools to extract and analyse data from enterprise systems, identifying trends, anomalies, and emerging risks for audit planning and fieldwork. For candidates with IT audit experience: assess IT governance, cybersecurity controls, systems, applications, and technology risks. Engage and communicate effectively with stakeholders at operational, management, and board levels.

Support risk assessment activities, advisory engagements, and whistleblower investigations. Contribute to continuous improvement initiatives within the Internal Audit function and provide value-added advisory services to business units. The Requirement Degree in Accountancy, Finance, Business, Information Systems, or a related discipline.

Professional qualification such as CIA, ACCA, CA, CPA, or CISA; ERM, CFE, BCM, or other related certifications are a plus. Minimum 5 years of experience in internal audit, risk management, compliance, or related functions, including at least 2 years in audit; a background in Information Systems is an advantage. Strong understanding of governance, risk management, internal controls, and audit methodologies.

Experience with data analytics tools (Excel, SQL, Python, R, ACL, IDEA) and audit management systems (Team. Mate+, Auto. Audit, Pentana) is advantageous. IT audit, cybersecurity, fraud investigation, enterprise risk management, or business continuity management experience is a plus. Strong communication, stakeholder management, analytical, report-writing, and problem-solving skills.

High level of integrity, independence, and professional scepticism; strong written and spoken English, with Mandarin or Bahasa Indonesia as a plus.