Consultant - Manager (Audit Management/GRC Risk Transformation)

Deloitte PLT; Kuala Lumpur; On-site; MYR 162,000 - 244,000; Full time

Job summary

A leading consulting firm is seeking a GRC Technology Consultant to join their team in Kuala Lumpur. In this role, you will gather business requirements and support the delivery of technology-enabled risk transformation projects. You will be instrumental in designing and implementing Audit Management functionalities, ensuring compliance with regulatory requirements. The ideal candidate will have a degree in a relevant field, with experience in GRC or Risk Advisory, and strong analytical skills.

Benefits

Positive work experiences

Culture of respect and inclusion

Diverse perspectives celebrated

Qualifications

• 1-3 years of experience in GRC, Internal Audit, or Risk Advisory.
• Strong knowledge of IIA Standards and COSO Internal Control Framework.
• Professional certifications such as GRC, CPA, CIA, or CISA are highly desirable.

Responsibilities

• Gather business and regulatory requirements from stakeholders.
• Develop test cases and UAT scripts for Audit Management module.
• Translate requirements into system specifications and user stories.

Skills

Business analysis

Problem-solving

Communication skills

Education

Bachelor’s or Master’s degree in Accounting, Business Administration, Risk Management

Tools

RSA Archer

SAP GRC

ServiceNow

Job description

Location: Bangkok, TH

Are you ready to unleash your potential?

At Deloitte, our purpose is to make an impact that matters for our clients, our people, and the communities we serve.

We believe we have a responsibility to be a force for good, and WorldImpact is our portfolio of initiatives focused on making a tangible impact on society’s biggest challenges and creating a better future. We strive to advise clients on how to deliver purpose‑led growth and embed more equitable, inclusive and sustainable business practices.

Hence, we seek talented individuals driven to excel and innovate, working together to achieve our shared goals.

We are committed to creating positive work experiences that foster a culture of respect and inclusion, where diverse perspectives are celebrated, and everyone is recognised for their contributions.

Ready to unleash your potential with us? Join the winning team now!

Work You Will Do

As a GRC Technology Consultant, you will be part of our Governance, Risk, and Compliance (GRC) team, supporting the delivery of technology‑enabled risk transformation projects. In this role, you will perform a functional consultant capacity by gathering business requirements, contributing to the design, implementation, and enhancement of the Audit Management (AM) module within our GRC platform.

You will act as a bridge between business stakeholders, risk management teams, and the system implementation team, ensuring effective design, testing, and deployment of Audit Management functionalities. Your work sensors with established risk management frameworks, regulatory requirements, and industry best practices to enable a robust and sustainable risk management environment.

Key Responsibilities

• Gather business and regulatory requirements from stakeholders நிலையில்.
• Provide advisory on Audit Management to support good design of system functionality to ensure design aligning with relevant regulatory requirement and good practice.
  • Audit Management Framework
  • Audit Management Workflow from end to end including audit planning, resource planning, risk assessment, audit engagement, audit program development, testing, audit issue management.
  • Audit مان unprecedented Universe and Audit Program
  • Audit Dashboard and Reporting
  • Audit Issue Management and Action Plan Tracking
• Translate requirements into system specifications and user stories.
• Prepare documentation including Requirement Traceability Matrix (RTM), Functional Specification Document (FSD), and process flows.
• Support design, configuration, and integration of the Audit Management module within the GRC platform.
• Develop and execute test cases and UAT scripts for Audit Management module.
• Support accuracy and completeness of data migration and system outputs.
• 史 Document test results, track defects, and support resolution.
• Create training materials such as manuals, quick guides, and e‑learning modules.
• Deliver user training sessions and provide adoption support.

Qualifications

• Bachelor’s or Master’s degree in Accounting, Auditing, Business Administration, Risk Management, Finance, Information Systems, or related field.
• 1–3 years of experience in GRC, Internal Audit, or Risk Advisory, preferably in the financial services sector.
• 5–8 years of experience in GRC, Internal Audit, or Risk Advisory, preferably in the financial services sector.
• Strong knowledge of IIA Standards, COSO Internal Control Framework, and Basel or BOT preferred.
• Experience with GRC platforms (RSA Archer, SAP GRC, MetricStream, or equivalent) is a plus.
• Archer Certified Administrator (Specialist/Expert), ServiceNow CIS (Risk & Compliance), or equivalent certification is a plus.
• Proficiency in business analysis, documentation, and stakeholder facilitation.
• Strong problem‑solving, analytical, and communication skills.
• Professional certifications such as GRC, CPA, CIA, CISA, CRISC, CISM, CISSP are highly desirable.

Technical Skills

• Exposure to GRC/IRM platforms such as Archer, ServiceNow, or MetricStream.
• Understanding of workflows, reporting, and dashboard.
• Proficiency in Microsoft Excel and PowerPoint for analysis[path> and reporting.

Soft Skills

• Analytical and detail‑oriented mindset with the ability to work on multiple projects simultaneously.
• Strong written and verbal communication, able to engage both technical and business stakeholders.
• Team‑oriented with a willingness to learn and adapt to dynamic client environments.
• Ability to work in structured consulting environments with deadlines and deliverables.

Caroline@Injectable policy:

Industry Focus: FSI

Exposure to banking нашústr asset management, digital asset, insurance, and financial services risk and compliance processes. Understanding of significant risk and compliance domain for specific industry.

Additional Information

Due to volume of applications, we regret only shortlisted candidates will be notified.ҵаара

Fl Ejulates the role?

Please note that Deloitte will never reach out to you directly via messaging platforms to offer you employment opportunities or request for money or your personal information. Kindly apply for roles that you are interested in via this official Deloitte website.

Requisition ID: 110920