Job Summary This role is responsible for planning and executing risk-based audit assignments, assessing the effectiveness of internal controls and risk management processes, and providing practical recommendations to support business growth, operational resilience, and regulatory compliance. The ideal candidate will have experience in the second or third line of defense within the financial industry, strong knowledge of risk management and internal control methodologies, and the ability to thrive in a fast-paced, evolving, and high-growth environment. Key Responsibilities 1. Develop and execute risk-based audit plans for assigned entities and business areas in alignment with applicable regulations, internal policies, and business strategy; independently perform audit projects and report results to senior management and the Audit Committee/Board of Directors. 2. Understand the regulatory environment, business model, and strategic priorities of the assigned entities; identify key risks, assess the adequacy and effectiveness of internal controls, and evaluate risk management practices across major business operations. 3. Prepare high-quality audit reports that clearly articulate key observations, root causes, risk implications, and practical recommendations, in compliance with internal standards and local regulatory requirements. 4. Communicate audit findings effectively with management and relevant stakeholders; discuss issues constructively, agree on remediation plans, and validate the implementation and effectiveness of corrective actions. 5. Provide value-added support to business risk management through continuous monitoring, thematic reviews, support for regulatory inspections, and the organization of relevant training and knowledge-sharing initiatives. 6. Leverage data analytics and innovative tools to improve audit efficiency and coverage. Experience with or openness to using AI-based tools in audit planning, testing, monitoring, reporting, or workflow enhancement is highly appreciated. 7. Work closely with stakeholders across business and control functions, and support engagements with regulators and other external parties where needed.