Executive/Specialist - Risk and Compliance

Scicom MSC Berhad; Kampung Cendana; Presencial; MYR 67.000 - 100.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Annual leave 15 days

Medical leave 14 days

Medical coverage

Descripción de la vacante

Scicom MSC Berhad is seeking a Compliance and Internal Audit professional to conduct ISO internal audits including ISO 27001 and ISO 9001, perform audit planning, execution, and reporting, and manage corrective actions. The role also involves maintaining ABAC-related records and supporting governance requirements.

The candidate should have certifications like CISA/CIA/ACCA/MIA/CPA and experience in IT audit, risk, and compliance.

Formación

• Bachelor’s degree or professional qualification (CISA, CIA, ACCA, MIA, CPA and/or other IT audit related professional qualification).
• Knowledge and experience in internal auditing for ISO 27001 Information Security Management System and ISO 9001 Quality Management System is mandatory.
• Knowledge of internal control processes, corporate governance, regulatory requirements and risk management.

Responsabilidades

• Conduct ISO internal audits, including ISO 27001 and ISO 9001, and other ad-hoc audits.
• Plan, execute, and finalise ISMS, QMS and follow-up audits with proper tracking.
• Coordinate, prepare and deliver presentations on compliance and risk management activities.

Conocimientos

Internal auditing

IT audit

Regulatory compliance

Analytical skills

Communication skills

Educación

CISA

CIA

ACCA

MIA

CPA

Herramientas

Microsoft Office

Excel

Visio

PowerPoint

Descripción del empleo

The Responsibilities of the Role:

• Conduct ISO internal audits, including Information Security Management System (ISO 27001), Quality Management System (ISO 9001), and other ad-hoc audits, including audit planning, execution, documentation of audit work performed, reporting, and communication of audit findings.
• Plan, execute, and finalise ISMS, QMS and ad-hoc follow-up audits, ensuring all non-conformities, observations, and corrective actions are properly tracked, validated, and closed.
• Review and track draft QMS documentation submitted by Operations and Shared Services, providing constructive feedback to support continuous improvement, strengthen adequacy of processes and controls, and ensure alignment with internal requirements and compliance standards.
• Maintain and update Scicom Anti-Bribery and Anti-Corruption Risk Registers, ensuring completeness, accuracy, and timely updates in line with governance requirements.
• Maintain and update or review Scicom Anti-Bribery and Anti-Corruption Risk Registers, ensuring completeness, accuracy, and timely updates in line with regulatory requirements.
• Maintain and update records relating to inbound gifts, hospitality, and entertainment declaration in accordance with ABAC policies.
• Maintain and update departmental ISMS/QMS documents, including Access Control Lists (ACL), Risk Treatment Plans (RTP), and Record Retention Schedule (RRS), ensuring timely revisions following reviews or as required.
• Prepare, update and maintain departmental trackers for all Process Implementation Approval Forms (PIAF) and Document Change Requests (DCR), ensuring proper monitoring, status tracking, and closure including the SES document management.
• Maintain and update the Scicom Senior Management Team organisation chart to ensure accuracy and alignment with current reporting structures including the SES document management.
• Maintain and update the ISO Representative trackers, ensuring accurate monitoring of appointments, responsibilities, and compliance-related records and manage the SES access control management of ISO representatives.
• Maintain and update departmental QMS documentation to ensure consistency, relevance, and compliance with internal and external requirements, including Board and Board Committee requirements.
• Act as a representative of the RC department in OSHA and Sustainability Committee meetings, ensuring alignment with regulatory, compliance, and organisational requirements.
• Coordinate, prepare and deliver presentations and workshops to employees within Scicom Group and management on compliance and risk management activities.
• Support the Manager - RC in the administration and management of Quality Management System related matters including SES document management.
• Support Operations teams in managing the end-to-end external certification processes (ISO, ISMS, SCP, etc.) including coordination, documentation support, and audit readiness activities where required.
• Perform any other special assignments, ad-hoc tasks as may be required to support the operation of RC function and overall governance requirements.

The Requirements for the Role:

Qualification & Skills Requirements:

• Bachelor’s degree or professional qualification (CISA, CIA, ACCA, MIA, CPA and/or other IT audit related professional qualification).
• Knowledge and experience in internal auditing for ISO 27001 Information Security Management System and ISO 9001 Quality Management System is mandatory.
• Knowledge and experience in investigative audit, IT audit and/or enterprise risk management framework will be an added advantage.
• Knowledge of internal control processes, corporate governance, regulatory requirements and risk management.
• A team player with strong work ethics, high level of professional integrity, maturity, independence and excellent analytical skills.
• Proficiency in Microsoft Office, Microsoft Excel, Microsoft Visio & PowerPoint.
• Ability to manage multiple tasks, meet deadlines, and work independently with minimal supervision.
• Good communication skills, report writing, analytical & interpersonal skills.

Work Experience:

• Minimum 2 years of experience in IT audit, internal audit, risk or compliance related roles.
• Ability to work out-of-office hours and travel as may be required from time to time.

The Package:

• Attractive Basic Salary.
• Performance Related Allowance.
• Annual Leave 15 days.
• Medical Leave 14 days.
• Medical and hospitalization coverage.