Manager/Senior Manager, Risk Consulting (IT Audit)

Crowe Malaysia PLT; Kuala Lumpur; On-site; MYR 120,000 - 180,000; Full time

Job summary

A leading consulting firm in Kuala Lumpur is seeking an IT Audit Manager to lead IT audits and provide consultancy services. The ideal candidate will have a strong background in IT audit frameworks, excellent communication skills, and the ability to manage a diverse team. This role involves overseeing audit engagements, coaching team members, and maintaining up-to-date knowledge of IT issues affecting businesses.

Qualifications

• Minimum 6 years of experience in IT audits.
• Familiarity with COBIT, NIST, BNM RMiT.
• Experience managing audits in regulatory environments.

Responsibilities

• Lead IT audits using COBIT framework.
• Provide consultancy to clients on IT controls.
• Present reports to Audit Committee/ Board.

Skills

Interpersonal skills

Written communication

Proactive

Teamwork

Education

Bachelor’s/ Master’s Degree in Computer Science

Professional IT qualifications (CISA, CRISC)

Job description

Responsibilities:

• Lead and participate in IT audits using the COBIT framework including audit planning, fieldwork, reporting and follow-up.
• Oversee the IT Audit Engagements by performing quality reviews to ensure that the IT Audit Objectives are met satisfactorily.
• Provide on-going coaching and direction to a team of IT Auditors to ensure that audits are performed in accordance with department and professional standards.
• Maintain a strong current knowledge of IT issues affecting businesses to assess the efficiency and effectiveness of the client’s IT general and application controls.
• Provide consultancy or advisory services to clients, if required to strengthen their IT general and application controls.
• Presentation of reports to the Audit Committee/ Board of Directors.
• Assist in business development initiatives, eg: preparation of proposals, participation in potential client meetings, etc.

Requirements:

• Possess Bachelor’s/ Masters’ Degree in Computer Science, Cybersecurity or related IT fields.
• Possess professional IT qualifications, e.g. Certified Information System Auditor (CISA), Certified Risk and Information Systems Control (CRISC), etc.
• At least 6years of working experiencein a similar role in an advisory or consulting firm.
• Experienced candidate is expected to be familiar with COBIT, NIST, BNM RMiT, PayNet, SC Cybersecurity framework and requirements.
• Demonstrated experience managing audits within a complex operational and regulatory environment.
• Demonstrated ability to plan and execute IT audits focusing on IT General Controls, including Access Security, Computer Operations, Change Management, Third Party Management, Business Continuity, Cybersecurity and Application Controls.
• Extensive information security and network control audit knowledge, and experience with network footprinting and penetration testing tools would be highly regarded.
• Experience in managing a staff of diverse professionals.
• Must possess strong interpersonal and written communication skills.
• Pro-active and able to work independently as well as on a team in a fast-paced, deadline-driven environment.