Roles & Responsibilities:
- Develop and implement the annual IT audit plan based on risk assessments and applicable regulatory requirements.
- Conduct audits of IT governance, IT general controls, banking applications, IT infrastructure, cybersecurity, data protection, and system access management.
- Assess compliance with NBC regulations, including applicable requirements under TCRMG 2026, and the Bank’s internal policies and procedures.
- Evaluate IT risk management, system development and change management, backup and recovery, business continuity, and third-party IT services.
- Prepare audit programs, working papers, audit findings, and reports supported by sufficient and reliable evidence.
- Identify control deficiencies, assess their root causes and risks, and recommend practical corrective actions.
- Discuss findings with relevant departments, monitor corrective action plans, and verify the effective resolution of audit issues.
- Report significant IT audit findings to the Head of Internal Audit Department and support reporting to the Audit Committee and Board through established reporting arrangements.
- Maintain audit independence, confidentiality, and professional standards.
- Keep up to date with NBC regulations, banking technology, cybersecurity threats, and professional IT audit practices
- Other tasks assigned by management.
Minimum Requirements:
- Bachelor’s degree in Information Technology, Computer Science, Information Systems, Cybersecurity, Accounting, Auditing, or a related field.
- At least 3 years of working experience as Team Leader of IT audit for banking or related field.
- Practical experience in conducting IT audits, assessing IT controls, preparing audit reports, and following up on audit findings.
- Good understanding of banking systems, IT governance, cybersecurity, information security, and technology risk management.
- Knowledge of NBC regulations applicable to banking technology and cybersecurity, including TCRMG 2026.
- Strong analytical, communication, report-writing, and problem-solving skills.
- High integrity, independence, professional judgment, and commitment to confidentiality.
- Good English proficiency, both written and spoken.
- Ability to manage multi-task and working pressure.
- Good leadership, facilitation, management and communication skills.
- Creative, and willing to learn new things and adapt to new working environment.
Preferred Qualifications:
- Professional certification such as CISA or ISO27001 Lead Auditor, or an equivalent relevant qualification + 3 years experiences.
How to apply:
- Interested candidates shall submit only CV with recent photograph (4X6 cm) and cover letter to address, Building Nº 79, Kampuchea Krom, Sangkat Monorom, Khan 7 Makara, Phnom Penh, or email to sbc_hr@shinhan.com Tel: (+855) 70 258 989 / 70 936 467.