Associate - IT Risk Assurance

Job Description & Summary

A career within PwC Vietnam - Information Technology Risk Assurance services will provide you the opportunity to develop and apply technologies that help clients to enhance efficiencies, get a higher return on investment and mitigate risks.

Responsibilities:

· Working closely with the Audit team to perform an assessment of the technical and general IT controls, infrastructure security, database security and business process/application controls.

· Deliver IT Risk Management, Controls and Process Advisory projects for our clients.

· Working closely with the IT Risk Assurance and Cybersecurity team to perform the following:

· Network, application or operation system vulnerability assessment.

· Automated tools (e.g. Nessus) to pinpoint vulnerabilities and reduce time-consuming tasks.

· Manual validation of report findings to reduce false positives.

· Develop requirements for local area networks (LANs), wide area networks (WANs), virtual private networks (VPNs), routers, firewalls, IDS and related network devices.

· Continuously researching new technology infrastructure, cyber security trends and security architecture changes, security standards, security systems and authentication protocols.

· Source code review (analyse source code on a line-by-line basis).

· Preparing and communicating to clients the working schedule.

· Identifying, analysing and discussing with audit clients the IT audit risks and proposing our recommendations.

· Documenting the working papers in a timely manner.

· Preparing management letters for audit clients or final reports for advisory clients.

· Assisting in marketing and business development, including proposals and meeting prospective clients.

Requirements:

· Final year students or fresh graduates with a strong degree in IT (Network/ Information Systems/ Security/Data Science and Analytics).

· Good communication and interpersonal skills.

· Good command of the English and Vietnamese languages.

· Having passed OSCP/CEH/CISSP/CSSLP/CPT/CISA exam will be a plus.

· Good command of the Japanese, Korean or Chinese languages will be a plus.

· Self-motivated, committed and confident people who are able to rise to the challenges of participating in intensive training, managing work responsibilities and client relationships.