Assistant Manager, IT SOX Financial Controls

HFG Insurance Recruitment; Kuala Lumpur; On-site; MYR 120,000 - 180,000; Full time

Job summary

Prudential is seeking an experienced IT SOX program lead to manage end-to-end testing and control assurance. You will coordinate walkthroughs, interim and year-end testing across ITGC, ITAC and IPE, ensuring SOC 1 reliance and audit-readiness.

You will oversee junior staff, maintain RCMs and drive remediation with senior stakeholders. The role requires 3+ years in IT controls/audit within large organisations, plus certifications such as CISA/CIA/ACCA/CPA.

Qualifications

• 3+ years of relevant experience in ITGC/IT Audit/IT SOX or external audit within a multinational organisation.
• Strong technical knowledge of ITGC domains including access, change, program development and operations.
• Practical experience with ITAC, IPE and SOC 1 within financial reporting controls.
• Proven experience in control testing, deficiency assessment, remediation tracking and audit workpapers.
• Experience supervising or coaching junior team members.
• Solid project management, stakeholder management, communication and issue-resolution skills.
• Experience in insurance, banking or financial services is advantageous.
• Professional certifications such as CISA, CIA, ACCA, CPA or CA are preferred.
• Exposure to Oracle ERP, IAM, CyberArk, Splunk, Cloud ITGC, GRC platforms, Power BI or Python is an added advantage.

Responsibilities

• Lead end-to-end delivery of IT SOX 404/PCOFR controls across Prudential’s Asian units.
• Plan and coordinate IT SOX walkthroughs, interim testing, roll-forward and year-end testing.
• Oversee testing across ITGC, ITAC, IPE and SOC 1 reliance.
• Supervise and coach Senior Associates and IT SOX testers to ensure audit-ready documentation.
• Review and maintain RCMs, process/control docs, workpapers and GRC records.
• Identify and address IT control deficiencies with root-cause analysis and remediation plans.
• Manage testing milestones, resources, risks and dependencies with clear status reporting.
• Collaborate with IT, Group Technology, Finance, control owners and external auditors to resolve issues.
• Assess IT control implications from major tech transformations (Oracle ERP, IAM, etc.).
• Drive continuous improvement via standardisation, automation, dashboards and data analytics.

Skills

ITSOX

ITGC

ITAC

IPE

SOC 1

Coaching

Project Mgmt

Data analytics

Education

CISA

CIA

ACCA

CPA/CA

Tools

Oracle ERP

IAM

CyberArk

Splunk

Power BI

Python

Job description

• Lead end-to-end delivery of an assigned portfolio of IT SOX 404 / PCOFR controls across Prudential’s in-scope Asian business units.
• Plan and coordinate IT SOX walkthroughs, interim testing, roll-forward and year-end testing in line with Group methodology and external audit requirements.
• Oversee testing across IT General Controls (ITGC), IT Application Controls (ITAC), Information Produced by the Entity (IPE) and SOC 1 reliance.
• Supervise, coach and review the work of Senior Associates, Associates and IT SOX testers, ensuring high-quality TOD/TOE testing and audit-ready documentation.
• Review and maintain Risk & Control Matrices (RCMs), process and control documentation, workpapers and GRC records for completeness and accuracy.
• Identify, assess and challenge IT control deficiencies, including root-cause analysis, severity ratings, remediation plans and timely closure of management actions.
• Manage testing milestones, resources, risks and dependencies, providing clear status reporting and timely escalation to senior stakeholders.
• Partner closely with IT, Group Technology, Finance, business-unit control owners and external auditors to resolve complex control and financial reporting matters.
• Assess IT control implications arising from major technology transformation initiatives, including Oracle ERP, IAM and other enterprise technology platforms.
• Drive continuous improvement through standardisation, automation, dashboards and data analytics to enhance IT SOX testing efficiency and quality.

Key Requirements

• Minimum 3 years of relevant experience in ITGC, IT Audit, IT SOX, Internal Audit or External Audit, preferably within a Big 4, listed, regulated or multinational organisation.
• Strong technical knowledge of ITGC domains, including access management, change management, program development and computer operations.
• Practical experience with ITAC, IPE and SOC 1 within a financial reporting controls environment.
• Proven experience in control testing, deficiency assessment, remediation tracking and audit workpaper review.
• Demonstrated experience supervising, reviewing or coaching junior team members.
• Strong project management, stakeholder management, communication and issue-resolution capabilities.
• Experience in insurance, banking, financial services or multinational organisations will be advantageous.
• Professional certifications such as CISA, CIA, ACCA, CPA or CA are preferred.
• Exposure to Oracle ERP, IAM, CyberArk, Splunk, Cloud ITGC, GRC platforms, Power BI or Python will be an added advantage.