Internal audit (ISO) Command in English

- Developing and completing annual work plan: Internal Audit, Internal Control Assessment, Quarterly Risk Assessment, monitoring of SOP establishment, Surprise Audit and other ad-hoc projects in consultation with team & stakeholders
- Performing internal audit and internal control projects including reviewing the adequacy and effectiveness of the controls over operations, financial reporting, safeguarding of asset and regulatory compliance across all the businesses in the entity
- During planning phase: performing risk assessment and preparing audit programs for the areas to be covered
- During fieldwork: conducting interviews, performing sample testing and drafting audit report with recommendation of corrective actions. Also, discussing with respective process owners about the audit observations, agreed action plans and remediation timeline
- Performing quarterly risk assessment using bottom-up approach and completing risk register which includes risk description, risk rating, potential risk impact & likelihood, risk owner, risk mitigation plan and etc.
- Conducting follow up audits to ensure gaps identified from internal audit, internal control and risk management activities are timely remediated
- Collaborating with all departments to ensure policies and procedures are in place for key business processes