Assistant Manager/Manager, IT Internal Audit

Lam Soon; Selangor; On-site; MYR 120,000 - 180,000; Full time

Job summary

Lam Soon is seeking an Assistant Manager/Manager, IT Internal Audit to lead ITGC and application-control audits across the Group, including access controls and change-management processes.

You will test and review key systems (Infor M3, WMS, Dynamics 365 BC), develop audit programmes, report findings, and coordinate with external auditors. A degree in IT and strong analytical skills are essential for this role.

Qualifications

• Diploma or Degree in Information Technology, Computer Science, Information Systems, or a related discipline.
• Good understanding of IT General Controls, system access controls, and operational IT environments.
• Experience in IT audit, ITGC testing, or IT support with audit exposure: Assistant Manager: 5–7 years, Manager: 8–10 years.
• Strong analytical, report-writing, communication, and stakeholder-management skills.
• Able to work independently and manage audit assignments from planning through completion.

Responsibilities

• Plan, execute, and complete IT audit assignments covering IT General Controls (ITGC) and application controls.
• Review key IT controls, including User access and privileged access management; Segregation of duties; System change management; IT operations and incident handling; Backup, recovery, and restoration processes.
• Conduct periodic user access reviews and assess whether access rights are appropriate.
• Perform walkthroughs and control testing on key business and operational systems, including Infor M3, Warehouse Management System (WMS), Microsoft Dynamics 365 Business Central, and other business applications used across the Group.
• Assess system controls relating to user roles, workflow approvals, data processing, system interfaces, reconciliations, and data integrity.
• Develop audit programmes, testing procedures, and well-structured audit working papers.
• Prepare clear audit reports outlining findings, risks, root causes, and practical recommendations.
• Track audit findings and follow up with IT and business stakeholders on remediation progress.
• Coordinate and support external IT audits and cybersecurity assessments.
• Monitor the implementation of ITGC and cybersecurity-related recommendations.
• Support the development of internal audit coverage for cybersecurity risks.

Skills

ITGC knowledge

Access controls

Audit planning

Stakeholder management

Analytical reporting

Education

Bachelor's degree in IT / CS / IS

Tools

SQL

Power BI

Infor M3

Microsoft Dynamics 365 Business Central

WMS

Job description

Jora Malaysia will close on 9th September 2026. Thank you for being with us, we are cheering you on as you continue your career journey.

Assistant Manager/Manager, IT Internal Audit

Key Responsibilities:

• Plan, execute, and complete IT audit assignments covering IT General Controls (ITGC) and application controls.
• Review key IT controls, including:
  • User access and privileged access management
  • Segregation of duties
  • System change management
  • IT operations and incident handling
  • Backup, recovery, and restoration processes
• Conduct periodic user access reviews and assess whether access rights are appropriate.
• Perform walkthroughs and control testing on key business and operational systems, including:
  • Infor M3
  • Warehouse Management System (WMS)
  • Microsoft Dynamics 365 Business Central
  • Other business applications used across the Group
• Assess system controls relating to user roles, workflow approvals, data processing, system interfaces, reconciliations, and data integrity.
• Develop audit programmes, testing procedures, and well-structured audit working papers.
• Prepare clear audit reports outlining findings, risks, root causes, and practical recommendations.
• Track audit findings and follow up with IT and business stakeholders on remediation progress.
• Coordinate and support external IT audits and cybersecurity assessments.
• Monitor the implementation of ITGC and cybersecurity-related recommendations.
• Support the development of internal audit coverage for cybersecurity risks.

Requirements:

• Diploma or Degree in Information Technology, Computer Science, Information Systems, or a related discipline.
• Good understanding of IT General Controls, system access controls, and operational IT environments.
• Experience in IT audit, ITGC testing, or IT support with audit exposure:
  • Assistant Manager: 5–7 years
  • Manager: 8–10 years
• Strong analytical, report-writing, communication, and stakeholder-management skills.
• Able to work independently and manage audit assignments from planning through completion.

Added Advantages:

• Professional certification such as CISA or CRISC.
• Experience in FMCG, manufacturing, plantation, warehousing, or other operational environments.
• Exposure to ERP, WMS, Microsoft Dynamics, or similar business systems.
• Knowledge of cybersecurity controls and risks.
• Experience using SQL, Power BI, or other data analytics tools.