Head of Technology Audit (Cybersecurity)

Ambition; Kuala Lumpur; On-site; MYR 260,000 - 420,000; Full time

Job summary

Ambition is seeking an experienced Head of Technology Audit (Financial Institution) in Kuala Lumpur. You will lead high‑risk technology and cyber security audits across the Group, shaping risk management and the audit plan for the cyber portfolio.

We want a technically strong practitioner with 12+ years in IT audit, solid grounding in IAM, vulnerability management, security operations and threat intelligence, plus exposure to AI security and digital assets.

Qualifications

• 12+ years in IT audit, information security or technology risk.
• Strong grounding in IAM, vulnerability management, security operations and threat intel.
• Familiarity with NIST and CIS cyber risk frameworks.
• Exposure to AI security and digital assets desirable.
• Excellent stakeholder communication to technical and business audiences.
• Degree in IT/CS/IS; CISA, CISSP, CEH, CCSP or GIAC desirable; CRISC, CISM or CIA a plus.

Responsibilities

• Plan, execute and report cyber audits across IAM, vulnerability management, code security, SOC and threat intel.
• Act as Team Manager/Lead on integrated audits with detailed review of the team's work.
• Identify risk impact, agree findings with management, and track remediation to closure.
• Contribute to the annual cyber risk assessment and audit plan.
• Champion data analytics and AI-driven audit methods; coach auditors on cyber topics.

Skills

IAM

Vulnerability mgmt

SOC

Threat intel

Offensive security

Stakeholder mgmt

Security governance

Education

Bachelor in IT/CS/IS

CISA

CISSP

CEH

CCSP

GIAC

CRISC

CISM

CIA

Tools

NIST

CIS

Job description

Head of Technology Audit (Financial Institution) | Kuala Lumpur

About the company?

Our client is a leading international financial institution with a strong global presence. It is a systemically important institution with a mature, well-invested technology and security function. You will join Group Internal Audit team, which audits at group level and has real influence over how risk is managed across the organisation. The role also gives you exposure to emerging areas such as AI security and digital assets.

The Role

You will lead the delivery of high-risk technology and cyber security audits across the Group. Key responsibilities include:

• Planning, executing and reporting on cyber audits across IAM, vulnerability management, code security, SOC, threat intelligence, red/purple teaming and penetration testing
• Acting as Team Manager or Team Lead on integrated audits, with detailed review and supervision of the team's work
• Identifying and articulating risk impact, agreeing findings with management, and tracking remediation through to closure
• Contributing to the annual risk assessment and audit plan for the cyber portfolio
• Championing data analytics and AI-driven methods in audit delivery, and coaching auditors on cyber security topics

What We're Looking For

We want a technically strong practioner who can translate deep security knowledge into clear, defensible assurance.

(Open for candidates from 1st Line without Audit Experience)

You’ll bring:

• 12+ years in IT audit, information security, technology risk management or related field
• Strong technical grounding in identity and access management, vulnerability management, security operations, threat intelligence and offensive security
• Working knowledge of industry frameworks such as NIST and CIS, and of cyber risk management practices
• Exposure to AI security and digital assets, which is highly desirable
• Strong stakeholder management, with the ability to communicate findings clearly to both technical and business audiences
• A degree in IT, Computer Science, Information Systems or a related field. CISA, CISSP, CEH, CCSP or GIAC is highly desirable, and CRISC, CISM or CIA is a plus

JTK Number: JTKSM 995 | Company Registration Number: 201301019088 (1048918-T)