PricewaterhouseCoopers (PwC)

Overview of job

• Work closely with the Audit team to perform assessments of the technical and general IT controls, infrastructure security, database security and business process/application controls
• Deliver IT risk management, controls and process advisory projects for our clients
• Work closely with the IT Risk Assurance and Cybersecurity team to perform the following:

• Execute network, application and operation system vulnerability assessments 
• Use automated tools (e.g. Nessus) to pinpoint vulnerabilities and reduce time-consuming tasks
• Manually validate report findings to reduce false positives
• Develop requirements for local area networks (LANs), wide area networks (WANs), virtual private networks (VPNs), routers, firewalls, IDS and related network devices
• Continuously research new technology infrastructure, cyber security trends and security architecture changes, security standards, security systems and authentication protocols
• Execute source code reviews (analyse source code on a line-by-line basis)
• Prepare and communicate working schedules to clients
• Identify, analyse and discuss with audit clients the IT audit risks they face and propose recommendations
• Document working papers in a timely manner
• Prepare management letters for audit clients or final reports for advisory clients
• Assist in marketing and business development, including making proposals and meeting prospective clients

Annual Leaves: 

• Junior Staff/Associate: 15 days ++
• Birthday leave, Sick Leave without certificate, Flexible Holidays

Bonus: 13th salary and performance review in July annually. 

Others: Digital upskilling program, professional & friendly working environment, team building, flex-wear, secondment opportunity to other countries...