Head, Information Systems Audit

Alliance Bank Malaysia Berhad; Kuala Lumpur; On-site; MYR 180,000 - 280,000; Full time

Job summary

Alliance Bank Malaysia Berhad is seeking a senior IS/audit professional to execute audit assignments in the plan and supervise all aspects of the process.

The role requires leadership in complex areas like core banking, cloud, cybersecurity and AI, with a focus on timely, professional reporting to GCIA and stakeholders. Mentoring, analytics planning, and adoption of AI-driven audit tools are key duties.

Qualifications

• Degree or good knowledge in related discipline.
• At least 10 years of relevant auditing experience including 5 years in a supervisory role.
• Sufficient experience auditing systems with exposure to implementations.
• Certifications such as CISA, CISM, CBA, CIA or equivalents preferred.

Responsibilities

• Execute IS audit assignments in accordance with the audit plan.
• Supervise, guide and monitor all aspects of audit execution and reporting.
• Communicate audit results to GCIA and stakeholders via written reports.
• Track outstanding audit findings until resolution.
• Lead audits in complex areas such as core banking, cloud, cybersecurity, and AI.
• Mentor auditors and develop analytics plans.
• Drive adoption of audit tech, analytics, automation and AI solutions.

Skills

Organisational Awareness

Strategic Thinking

Leadership

Planning & Organisation

Analytical & Problem Solving

Decision Making

Education

Degree or related discipline

CISA / CISM / CBA / CIA / CISSP or equivalents

Job description

• Execution of IS audit assignments in the audit plan including:
• Ensure audit assignments are carried out in accordance with the GIA Audit Procedures Manual including, but not limited to, supervising, guiding and monitoring all aspects of the audit assignment execution and reporting to ensure they are carried out professionally and in a timely manner, and with proficiency and due professional care.
• Ensure results of the audit assignments are effectively and timely communicated to the GCIA, and once GCIA has completed the review, to all relevant stakeholders by way of a written report.
• Ensure timely and accurate tracking of all outstanding audit findings from audit assignments, including those raised by regulators and external auditors, until resolution.
• Personally lead and perform audit work on complex or specialised areas, including core banking, cloud, cybersecurity and artificial intelligence related applications, where required.
• Mentoring and guiding auditors on IS audit;
• Development and execution of the analytics plan; and
• Driving the implementation and adoption of systems and technology within Group Internal Audit, including audit management systems, data analytics, automation and artificial intelligence solutions, from requirements gathering and deployment to continuous enhancement.

In addition, to assist the GCIA in any areas as directed including the following:

• Audit planning process - annual and mid-year review especially for IS audits;
• Execution of other audit assignments or non-audit related activities;
• IS audit staff management - from development plans to performance management (KPI achievements); and
• Assessment of emerging technology and artificial intelligence developments, and their implications on the Group's risk profile and the IS audit plan.

Other responsibilities include but not limited to:

• To represent GIA in Committee meetings, where required.
• To maintain professional relationships and when required, business partner relationship with other Group divisions especially with Group Digital and Information.
• To participate in key system implementation projects / committees as observers or in an advisory / consultative capacity, providing input and independent views on risks and controls during project and committee meetings, including for initiatives involving new technology and artificial intelligence.
• To keep abreast of developments in technology and artificial intelligence, and to promote their practical application in the delivery of audit work.

Skills

• Organisational Awareness
• Strategic Thinking
• Leadership
• Planning & Organisation
• Analytical & Problem Solving
• Decision Making

Knowledge

• Industry awareness / knowledge of banking, legal and regulatory requirements, leading practices and framework for risk management, internal auditing - including risk-based auditing and corporate governance.
• Relevant tertiary or professional certification knowledge in audit/assurance.
• Risk management framework and processes.
• Best practices of audit techniques and up to-date audit practices including that of management audit.
• Domain knowledge in analytics, familiarity in robotic process automation and artificial intelligence, including their practical application in the audit process and the risks and controls associated with their use.

Experience

• Degree or good knowledge in related discipline.
• At least 10 years of relevant auditing experience including 5 years of relevant experiences in a supervisory role.
• Sufficiently experienced in auditing systems to perform IS audit assignments independently with exposure to systems implementation or deployment initiatives.
• Preferable with a recognised certification such as CISA, CISM, CBA, CIA, Chartered Banker, CISSP, or equivalents.