Assistant Manager/Manager, IT Internal Audit

Lam Soon Edible Oils Sdn Bhd; Shah Alam; On-site; MYR 120,000 - 180,000; Full time

Job summary

Lam Soon Edible Oils Sdn Bhd is seeking an IT audit professional to plan, execute, and complete IT audit assignments across the Group, assessing IT controls and identifying risks. You will review access controls, conduct testing on ERP and business systems (Infor M3, WMS, Microsoft Dynamics 365 Business Central), and report findings with practical remediation recommendations.

The role requires 5–7 years (Assistant Manager) or 8–10 years (Manager) of IT audit or ITGC experience, with strong

Qualifications

• Must have strong analytical and reporting abilities.
• Good written and verbal communication with stakeholders.
• Independent and able to manage audits from planning to completion.

Responsibilities

• Plan, execute, and complete IT audit assignments covering ITGC and application controls.
• Review key IT controls including access management, SDLC, IT operations, incident handling, backups, and restoration.
• Conduct user access reviews and assess appropriateness of rights.
• Perform walkthroughs and control testing on ERP and business systems (Infor M3, WMS, Dynamics 365 BC, Quarto, etc.).
• Prepare audit reports with findings, risks, root causes, and practical recommendations.
• Track findings and coordinate remediation with IT and business stakeholders.
• Coordinate external IT audits and cybersecurity assessments.
• Monitor implementation of ITGC and cybersecurity recommendations.

Skills

Analytical skills

Report writing

Communication

Stakeholder management

Education

Diploma or Degree in IT/CS/IS or related

Tools

SQL

Power BI

Job description

Responsible for planning and conducting IT audit assignments across the Group to assess the effectiveness of IT controls, identify risks and control gaps, and recommend practical improvements.

Key Responsibilities:

• Plan, execute, and complete IT audit assignments covering IT General Controls (ITGC) and application controls.
• Review key IT controls, including user and privileged access management, segregation of duties, system change management, IT operations, incident handling, and backup, recovery, and restoration processes.
• Conduct periodic user access reviews and assess whether access rights are appropriate.
• Perform walkthroughs and control testing on key business and operational systems, including Infor M3, Warehouse Management System (WMS), Microsoft Dynamics 365 Business Central, Quarto plantation system, and other applications used across the Group.
• Assess system controls relating to user roles, workflow approvals, data processing, system interfaces, reconciliations, and data integrity.
• Develop audit programmes, testing procedures, and well-structured audit working papers.
• Prepare clear audit reports outlining findings, risks, root causes, and practical recommendations.
• Track audit findings and follow up with IT and business stakeholders on remediation progress.
• Coordinate and support external IT audits and cybersecurity assessments.
• Monitor the implementation of ITGC and cybersecurity-related recommendations.
• Support the development of internal audit coverage for cybersecurity risks.

Requirements:

• Diploma or Degree in Information Technology, Computer Science, Information Systems, or a related discipline.
• Good understanding of IT General Controls, system access controls, and operational IT environments.
• Minimum 5-7 years of experience in IT audit, ITGC testing, or IT support with audit exposure for the Assistant Manager level, and 8-10 years for the Manager level.
• Strong analytical, report-writing, communication, and stakeholder-management skills.
• Able to work independently and manage audit assignments from planning through completion.

Added Advantages:

• Professional certification such as CISA or CRISC.
• Experience in FMCG, manufacturing, plantation, warehousing, or other operational environments.
• Exposure to ERP, WMS, Microsoft Dynamics, or similar business systems.
• Knowledge of cybersecurity controls and risks.
• Experience using SQL, Power BI, or other data analytics tools.