Director, Technology Risk Assurance (IT Audit)

The Edge Partnership; Kampung Malaysia Tambahan; On-site; MYR 300,000 - 600,000; Full time

Benefits offered by this job

Path to Partner

Leadership of a growing practice

Regional and global mobility programme

Competitive remuneration and benefits

Job summary

The Edge Partnership in Kuala Lumpur is seeking a Director / Senior Manager to lead IT audit and technology risk assurance engagements. The role focuses on assuring ITGCs, ERP and automated controls, and understanding how these controls support the financial statements.

Responsibilities include planning and overseeing SOX/ICFR testing, delivering SOC 1/2 and ISAE 3402 reports, and applying data analytics to testing; you will coach teams, manage resources, and drive business development within

Qualifications

• Degree in Information Systems or related field.
• CISA certification preferred.
• 10+ years in IT audit or technology risk roles.
• Proven record leading engagements and teams.
• Strong knowledge of IFRS, ICFR/SOX and ITGC/ERP controls.
• Experience across manufacturing, financial services, payments, utilities or software.

Responsibilities

• Lead IT audit engagements for listed and private clients, covering ITGCs and application controls.
• Assess ERP environments (SAP, Oracle) and rely on IT controls for financial statements.
• Plan SOX/ICFR and related control testing; review workpapers and conclusions.
• Deliver SOC 1/2/ISAE 3402 reporting and IT governance reviews.
• Apply data analytics to test full populations and communicate results to stakeholders.
• Coach and supervise engagement teams, manage resources and resolve conflicts.
• Report findings to Partners and client senior management, including audit committees.
• Support audit quality reviews and regulatory inspections; contribute to business development.

Skills

IT audit leadership

IFRS/ICFR/SOX knowledge

Data analytics

Project/team leadership

Regulatory reviews

Education

Degree in Information Systems or related field

CISA certification

Tools

SAP

Oracle

Job description

Our client, a leading international professional services firm, is hiring a Director / Senior Manager to lead IT audit and technology risk assurance engagements in Kuala Lumpur. The role is a dedicated IT audit position: someone who can assure ITGCs, ERP and automated controls, and understand how those controls support the financial statements.

Key responsibilities:

• Lead IT audit engagements for listed and private clients, covering ITGCs, automated and application controls, and financial systems risk.
• Assess ERP and core system environments (e.g. SAP, Oracle, payment systems) and conclude on reliance on IT controls for the financial statement audit.
• Plan and oversee SOX / ICFR and SORMIC-type control testing and review the quality of workpapers and conclusions.
• Deliver SOC 1 / SOC 2 / ISAE 3402 reporting, IT governance and cybersecurity reviews, and regulatory reviews such as BNM RMiT for financial-sector clients.
• Build and apply data and analytics procedures to test full populations and present results to stakeholders.
• Coach and supervise engagement teams, manage resourcing and allocations and resolve conflicts across teams.
• Report findings and risk ratings directly to Partners and client senior management, including audit committees.
• Support audit quality reviews and regulatory inspections of engagement files.
• Contribute to business development, proposals and growth of the Technology Risk Assurance practice.

Requirements:

• Degree in Information Systems or a related field
• CISA certification is highly preferred
• 10+ years in IT audit or technology risk, ideally at a leading international or large mid-tier audit firm.
• Proven record leading engagements and teams of up to 10 members, with Manager-level or above experience.
• Strong knowledge of IFRS and ICFR / SOX, and of ITGC and ERP control frameworks (COBIT, ISO 27001, NIST).
• Experience across several industries, such as manufacturing, financial services, payments, power and utilities or software.
• Additional certifications such as CISSP, CISM, CRISC or ISO 27001 Lead Auditor.

What our client offers

• A path to Partner through a defined Technology Risk Assurance track
• Leadership of a growing practice with a diverse client portfolio
• Regional and global mobility programmes
• Competitive remuneration and benefits