Reports To:Head of Group Audit and Risk Management 

Job Highlights:

• Planning and executing risk-based IT audit projects
• Holder of CPA, CISA, CISM or CISSP
• Degree holder in Business Administration, Accounting, Computer Science or relevant disciplines
• Minimum of 3 years of risk-focused internal / external IT audit experience

Overall Purpose of Job:

To work as part of the team to identify control risks within the business units of Jardine Group across various industries and to examine and evaluate the adequacy of controls available to mitigate those risks.  The role will focus primarily on IT and cybersecurity risks, and there will be opportunities to cover financial and operational areas where appropriate during the job progression. Key activities include: 

• Providing assurance that controls within individual business units are operating effectively and can be relied on to provide accurate information.
• Providing assistance and advice to business unit management to improve the efficiency and effectiveness of its operations.
• Assisting in the promotion of the best practices in Enterprise Risk Management for business units across the Group.

Detailed Responsibilities: 

• Undertake IT audits and non-IT audit (when appropriate) projects as per best practice and Group guidelines, and effectively communicate audit results and provide recommendations to the business unit management.
• Manage the allocated portfolios, starting initially with IT focus and subsequently on financial and operational functions, specifically relating to:

-       Composing the annual audit plan based on risk assessment;

-       Assigning resources for delivering the audit reviews;

-       Reviewing the audit reports to ensure the quality of audit; and

-       Assisting with the preparation of Audit Committee reporting.

• Maintain good relationships with key stakeholders of businesses to ensure the key risks in the Group are adequately addressed and to facilitate improvements in its control environment.
• Develop and/or update IT audit methodology and program based on latest industrial/technology trend and updates.
• Assist in internal projects for continuing development and improvement of GARM.

Requirements: 

• Degree holder in Business Administration, Accounting, Computer Science or relevant disciplines plus relevant professional qualifications such as CPA, CISA, CISM or CISSP.
• Minimum of 3 years of risk-focused internal / external IT audit experience, with strong ability to understand and review IT risks and controls within business processes. Knowledge of using CAATs and data analytics is a plus.
• Strong auditing experience in IT areas relating to system implementation, IT infrastructure (databases, operating systems, networks, etc.), cybersecurity, business continuity & disaster recovery, data privacy, IT application controls. Knowledge on auditing new technology such as RPA, Cloud Computing and AI is a plus.
• At least 30% of travel should be expected.
• Excellent spoken and written English, and fluent Mandarin. Proficient in Bahasa will be a plus.

About Jardine Matheson

Jardine Matheson is a diversified Asian-based group with unsurpassed experience in the region, having been founded in China in 1832. We comprise a broad portfolio of market-leading businesses, which represent a combination of cash generating activities and long-term property assets that are closely aligned to the increasingly prosperous consumers of the region. Across the Group, our over 400,000 employees work in a wide range of businesses in major sectors including motor vehicles and related operations, property investment and development, food retailing, health and beauty, home furnishings, engineering and construction, transport services, restaurants, luxury hotels, financial services, heavy equipment, mining and agribusiness.