Associate - IT Risk Assurance (Fresh Graduates)

+ Working closely with the Audit team to perform assessment of the technical and general IT controls, infrastructure security, database security and business process/application controls.
+ Deliver IT Risk Management, Controls and Process Advisory projects for our clients.
+ Working closely with the IT Risk Assurance and Cybersecurity team to perform the following:
+ Network, application or operation system vulnerability assessment.
+ Automated tools (e.g. Nessus) to pinpoint vulnerabilities and reduce time-consuming tasks.
+ Manual validation of report findings to reduce false positives.
+ Develop requirements for local area networks (LANs), wide area networks (WANs), virtual private networks (VPNs), routers, firewalls, IDS and related network devices.
+ Continuously researching new technology infrastructure, cyber security trend and security architecture changes, security standards, security systems and authentication protocols.
+ Source code review (analyse source code on a line-by-line basis).
+ Preparing and communicating to clients the working schedule.
+ Identifying, analysing and discussing with audit clients the IT audit risks and proposing our recommendations.
+ Documenting the working papers in a timely manner.
+ Preparing management letters for audit clients or final reports for advisory clients.
+ Assisting in marketing and business development, including proposals and meeting prospective clients.