Deputy Manager, Internal Audit

The Job

• Contribute to the development of the risk-based annual audit workplan and report progress and recommendations to the Audit & Risk Committee (ARC) on a quarterly basis.


• Independently plan and execute audit engagements across business operations, procurement, project management, asset management, leases, facilities management, revenue collection, and other key functions — assessing risks, controls, and compliance.


• Evaluate the adequacy and effectiveness of governance, risk management, and internal control frameworks.


• Perform audit testing and data analysis; identify control weaknesses and root causes; produce quality audit reports with practical, value-added recommendations.


• Monitor and follow up on audit findings to ensure timely implementation of corrective actions.


• Leverage data analytics and technology tools to extract and analyse data from enterprise systems, identifying trends, anomalies, and emerging risks for audit planning and fieldwork.


• For candidates with IT audit experience: assess IT governance, cybersecurity controls, systems, applications, and technology risks.


• Engage and communicate effectively with stakeholders at operational, management, and board levels.


• Support risk assessment activities, advisory engagements, and whistleblower investigations.


• Contribute to continuous improvement initiatives within the Internal Audit function and provide value-added advisory services to business units.

The Requirement

• Degree in Accountancy, Finance, Business, Information Systems, or a related discipline.


• Professional qualification such as CIA, ACCA, CA, CPA, or CISA; ERM, CFE, BCM, or other related certifications are a plus.


• Minimum 5 years of experience in internal audit, risk management, compliance, or related functions, including at least 2 years in audit; a background in Information Systems is an advantage.


• Strong understanding of governance, risk management, internal controls, and audit methodologies.


• Experience with data analytics tools (Excel, SQL, Python, R, ACL, IDEA) and audit management systems (TeamMate+, AutoAudit, Pentana) is advantageous.


• IT audit, cybersecurity, fraud investigation, enterprise risk management, or business continuity management experience is a plus.


• Strong communication, stakeholder management, analytical, report-writing, and problem-solving skills.


• High level of integrity, independence, and professional scepticism; strong written and spoken English, with Mandarin or Bahasa Indonesia as a plus.