Senior Manager/Associate Director, SOX Auditor & Cybersecurity Risk (SOX ITGC)

Our Journey ShopBack started as a spark of inspiration one night in 2014 when Henry and Joel were brainstorming ideas in Henry’s car. That lightbulb moment — earning Cashback while shopping online — was just the beginning. Fueled by the countless possibilities, the team locked themselves in a hotel room for 24 hours to code the very first prototype. Their mission? To revolutionize shopping by helping advertisers market more cost-effectively, while making every purchase more rewarding for shoppers. Today, ShopBack is the leading shopping, rewards, and payments platform in Asia-Pacific, empowering 45 million shoppers across 12 markets. With 20,000+ partners and over half a million transactions daily, we’re redefining the way the world shops. As we expand globally, we’re looking for adventurous, driven individuals to help us build The World’s Most Rewarding Way to Shop. To conduct IT audit, SOX ITGC testing and cybersecurity risk management & assessment to give reassurance to management: -Where the system of internal control is found to be adequate for achieving management objectives in an efficient manner and where the established procedures are being properly followed. -Where information system assets are found to be adequately safeguarded and properly protected. -Where the management information available is found to be sound and adequate for proper control. Your Adventure Ahead

IT Audit & SOX ITGC

To collaborate with the Deputy Director of Internal Audit & SOX to;

Perform SOX ITGC scoping by considering complex microservices architecture within the Company and develop SOX ITGC Risk Control Matrix (as well as subsequent annual update).

Establish and develop IT Audit Programme and SOX ITGC Test Plan to conduct annual SOX ITGC testing (TOD & TOE) and IT audit assignment(s) according to approved Internal Audit Plan.

Draft audit report and SOX ITGC deficiency with sufficient quality to the Head of Internal Audit & Corporate Governance for review.

Cybersecurity Risk Management & Assessment

To collaborate with the Deputy Director of Risk & Compliance to:

Develop group level IT risk profile in IT Risk Register by conducting IT and Cybersecurity risk assessment to identify, assess and monitor information and / or cybersecurity risks within the Company’s information systems and technological needs to safeguard business goals and strategies. 

Work closely with the cybersecurity / technology team to devise feasible solution(s) and develop protocols to mitigate potential risks.

Others

To keep abreast of the latest information and cyber security trends, requirements and threats relating to FinTech, Artificial Intelligence, Big Data, Cloud Computing, etc.

To respect the confidentiality of all information obtained in the course of audit work.

To perform any other duties as and when instructed by the Head of Internal Audit & Corporate Governance.

Essentials to Succeed

10 years of solid IT audit & cyber security experience from big 4 / reputable MNC.

Thorough knowledge of all systems and technology used by the company as well as keeping up to date with relevant innovations in the field.

Ability to communicate effectively and articulate opinions independently.

Some stress is inherent in long working hours, which may be experienced in undertaking and completing audit assignments.

Ability to work independently, self-motivated while being a great team player.

Professionally certified (e.g., CISA, CISSP, etc.) will be an added advantage.