Cybersecurity & Regulatory Audit Specialist

EPF Malaysia; Petaling Jaya; On-site; MYR 120,000 - 180,000; Full time

Job summary

EPF Malaysia is seeking a capable IT Audit professional to support risk-based audit engagements, focusing on cybersecurity and regulatory controls across digital technology environments.

You will execute fieldwork, test controls, analyze vulnerabilities and KRIs, prepare working papers, and contribute to analytics-enabled, AI-driven audit practices and continuous auditing to strengthen governance, risk, and compliance.

Qualifications

• Bachelor’s degree in IT, cyber security, CS or accounting.
• 4–7 years in IT audit, cybersecurity or technology risk management.
• Professional certifications such as CISA, CISSP, CISM or CRISC.

Responsibilities

• Support risk-based annual audit plans including cybersecurity and regulatory compliance.
• Execute risk-based audit assignments in accordance with GIAS and EPF methodology.
• Perform walkthroughs, control testing and documentation of audit evidence.
• Identify control deficiencies and root causes in cybersecurity and regulatory areas.
• Prepare audit observations, reports and management communications.

Skills

Cybersecurity governance

IT audit

Risk assurance

Regulatory compliance

Data analytics

Education

Bachelor’s Degree in IT / Cyber Security / CS / Accounting

Job description

EPF Malaysia is seeking a capable IT Audit professional to support risk-based audit engagements, focusing on cybersecurity and regulatory controls across digital technology environments.

You will execute fieldwork, test controls, analyze vulnerabilities and KRIs, prepare working papers, and contribute to analytics-enabled, AI-driven audit practices and continuous auditing to strengthen governance, risk, and compliance.