IT 內部稽核專員（技術導向）｜IT Internal Auditor

亞洲即時互動體龍頭17 LIVE秉持讓內容創作者發光發熱的使命，提供創作者影音平台進行直播互動、節目錄製與表演的舞台，更落實健全的系統化模式，從挖掘、培訓到宣傳，致力打破傳統經紀公司的模式，並攜手橫跨娛樂、網紅經紀等產業的合作夥伴，壯大海內外發展、布局全球，引領世界進入直播新媒體世代。

17 LIVE 歡迎對以下工作內容有興趣的 IT 內部稽核專員 加入我們的大家庭！

• 工作內容
• 1.進行 App 與原始碼稽核，實際檢視程式碼，確認資安與個資保護（GDPR / APPI）落實情況
• 2.稽核 軟體開發生命週期（SDLC），確認程式碼與核准設計一致，未繞過 DevOps 流程
• 3.執行 IT 一般控制（ITGC）測試（存取控制、變更管理、系統營運），符合 SGX 上市規範
• 4.參與 集團 IT 風險評估，涵蓋資安、系統可用性與營運風險
• 5.擔任台灣端技術窗口，協助內部稽核夥伴與外部會計師（如 PwC）進行稽核
• 6.擔任流程簡化專案與未來 ERP 導入之 IT 風險顧問，建議控制自動化方案

• 工作條件
• 1.3 年以上 IT 稽核、資訊安全，或具合規導向之工程師相關經驗
• 2.具程式閱讀能力，能理解 Go、Python、Swift、Java 等語言
• 3.熟悉 ITGC、US-SOX、SDLC 資安與變更管理概念
• 4.中文母語、英文具商務溝通與報告能力

• 其他條件
• 1.善於溝通，能與工程團隊進行專業且具建設性的合規討論
• 2.可適應跨國、雙匯報線（台灣 / 日本）之組織合作模式

• 17 LIVE is the world leader in the live streaming industry and real-time content sharing mobile application for celebrities, entertainers, and influencers. We allow users to create and share their lives through live streams and photos, all while earning royalties.
• We are a global company, with users in more than 50 countries. We offer a dynamic work environment, and an opportunity to collaborate with passionate individuals and leading-edge technologies. As we rapidly expand across the world, we are looking for dedicated professionals to be a part of our family, to be part of our vision to be the global champion in live media and entertainment.
• We are currently hiring for IT Internal Auditor professionals that will take part in:

• Responsibilities
• 1.Perform hands-on App and source code reviews to ensure security and data privacy compliance (GDPR / APPI)
• 2.Audit the Software Development Life Cycle (SDLC) to verify code aligns with approved designs and DevOps controls
• 3.Execute IT General Controls (ITGC) testing including access, change management, and IT operations to meet SGX requirements
• 4.Participate in Group-wide IT risk assessments covering cybersecurity, system availability, and operational risks
• 5.Act as the primary technical contact in Taiwan for internal audit partners and external auditors (e.g., PwC)
• 6.Serve as IT risk advisor for process simplification initiatives and future ERP implementation, recommending control automation

• Qualifications
• 1.3+ years of experience in IT audit, information security, or compliance-focused engineering roles
• 2.Strong code literacy with the ability to read Go, Python, Swift, Java, or similar languages
• 3.Familiarity with ITGC, US-SOX, and SDLC security best practices
• 4.Native Mandarin and business-level English proficiency

• Additional Information
• 1.Strong communication skills with the ability to challenge engineering teams constructively
• 2.Comfortable working in a matrix organization with dual reporting lines