Executive - IT Audit

Sunway Berhad; Subang Jaya; On-site; MYR 60,000 - 100,000; Full time

Job summary

Sunway Berhad is seeking an IT Audit professional to assist the GIAD in executing IT audit assignments across governance, security, operations and projects. You will review controls, assess risk, and report findings to management with a focus on improving assurance and compliance.

Role requires a Bachelor’s degree in IT/CS/IS or equivalent, 1–2 years in IT audit or cybersecurity, and familiarity with COBIT, ISO27001, and NIST.

Qualifications

• Bachelor’s degree in IT or equivalent is required.
• Professional certifications such as CISA, CISM, CISSP or ISO27001 LA are an advantage.
• 1–2 years of IT audit, IT risk management or cybersecurity experience preferred.

Responsibilities

• Execute IT audit assignments per the annual audit plan across IT governance, information security, cybersecurity, IT operations and projects.
• Review IT controls, risk management and governance for integrity and reliability of the IT control environment.
• Assess compliance with internal policies and standards such as COBIT, ISO27001, NIST.
• Identify control weaknesses, report findings, and propose improvements.
• Assist in presenting findings to management and contributing to KPI achievement.

Skills

IT audit

IT governance

Information security

Cybersecurity

Data analytics

Audit execution

Education

Bachelor’s Degree in Information Technology, Computer Science, Information Systems or equivalent

Tools

COBIT

ISO27001

NIST

Job description

Jora Malaysia will close on 16th September 2026. Thank you for being with us, we are cheering you on as you continue your career journey.

As a member of the IT audit team, assisting the Manager / Senior Manager / Head of Group Internal Audit Department (GIAD) in the following areas:-

• Execute IT audit assignments in accordance with the annual audit plan, covering areas such as IT governance, information security, cybersecurity, IT operations & infrastructure, application controls, compliance review, IT projects, emerging technologies and system related investigation, as well as any other audit work undertaken by GIAD.
• Review and evaluate the adequacy and effectiveness of IT controls, risk management processes, and governance practices to provide assurance to the Audit Committee, Board of Directors and Senior Management on the integrity and reliability of the Group’s IT control environment.
• Assess compliance with internal policies, regulatory requirements and professional standards (e.g. ISO 27001, NIST, COBIT).
• Identify and report control weaknesses, root causes, potential risks and recommend value adding improvements.
• Document audit results, compile findings for the audit report, recommend corrective actions and follow-up on agreed action plans where appropriate.
• Assist the Audit Manager/Team Leader in presenting audit findings and recommendations to management.
• Contribute to the overall achievement of audit team KPIs and department goals.
• Assist the Manager / Team Leader in providing on-the-job training to new team members where necessary.
• Support continuous improvement of audit methodologies, automation and use of data analytics to enhance assurance coverage and efficiency.
• Perform any other duties as assigned by the HOD as and when necessary.

Key Requirements:

• Bachelor’s Degree in Information Technology, Computer Science, Information Systems or equivalent.
• Professional certification such as CISA, CISM, CISSP, ISO27001 LA or equivalent will be added advantage.
• Minimum 1-2 years of relevant experience in IT audit, IT risk management or cybersecurity, preferably in a public listed company or professional services firm.
• Strong understanding of IT governance & controls, cybersecurity and emerging technologies (cloud computing, AI, automation).
• Familiarity with control frameworks and standards such as COBIT, ISO 27001, NIST.
• Excellent interpersonal & communication, analytical and report-writing skills.
• Able to work independently and collaboratively in a fast-paced and dynamic environment.