INFORMATION SYSTEM / IT AUDIT EXECUTIVE

SmartHire by SEEK; Kuala Lumpur; On-site; MYR 60,000 - 90,000; Full time

Job summary

Pacific & Orient Berhad seeks an Information System / IT Audit Executive to own IT risk assessments, lead risk-based audits across IT functions, and strengthen controls and security. You will monitor compliance with security policies and applicable regulations in a dynamic financial services setting.

The role emphasizes governance, risk management, and continuous improvement, with a focus on data integrity, security controls, and proactive recommendations to reduce risk and improve operations.

Qualifications

• Educational background: degree in Computer Science or MIS.
• Certification: CISA valued; ACCA/CIMA advantageous.
• Experience: 2–3 years in information systems auditing.
• Industry knowledge: familiarity with general insurance helpful.
• Analytical and technical skills with MS Office proficiency.
• Language: English and Bahasa Malaysia proficiency required.

Responsibilities

• IT Risk Assessment—conduct annual risk assessments and drive audit plans.
• Risk-Based IT Auditing—plan, execute, document audits across IT functions.
• Control & Security Improvement—identify gaps and propose improvements.
• Compliance Monitoring—ensure adherence to security policies and laws.

Skills

IT Risk Assessment

Risk-Based IT Auditing

Control & Security Improvement

Compliance Monitoring

Analytical Skills

Microsoft Office

Education

Bachelor's degree in Computer Science / MIS

Tools

MS Office

Job description

Our client "Pacific & Orient Berhad" is seeking an Information System / IT Audit Executive to join their team!

Are you a detail-oriented IT audit professional looking to grow your career in a dynamic financial services environment? This is a compelling opportunity to take ownership of meaningful audit work, contribute to strengthening information security and internal controls, and build deep expertise within the insurance industry. With exposure to risk-based auditing across IT functions and systems, this role offers a well-rounded platform for professionals who are passionate about governance, compliance, and continuous improvement.

What you'll be doing?

• IT Risk Assessment — Conduct annual IT risk assessments and take the lead in proposing and prioritising audit plans based on identified risk levels to ensure resources are focused where they matter most.
• Risk-Based IT Auditing — Plan, execute, and document comprehensive risk-based audits across IT functions, processes, and underlying systems, with a focus on evaluating control environments, security measures, and data integrity.
• Control & Security Improvement — Identify gaps in internal controls and data security, then develop practical, value-added recommendations that reduce costs, improve operational efficiency, and address control weaknesses.
• Compliance Monitoring — Monitor and ensure ongoing compliance with the organisation's security policies and procedures, as well as applicable federal, state, and local laws, regulations, and accreditation standards.

Who are they looking for?

• Educational Background — A degree in Computer Science, Management Information Systems, or a related discipline forms a strong foundation for this role.
• Professional Certification — Possession of, or active pursuit of, the Certified Information System Auditor (CISA) certification is highly valued; candidates holding CISA alongside ACCA or CIMA qualifications are also warmly encouraged to apply.
• Relevant Experience — A minimum of 2 to 3 years of experience in information systems auditing is ideal.
• Industry Knowledge — A background or familiarity with the general insurance industry would be considered a bonus and is by no means essential.
• Analytical & Technical Skills — Strong analytical capabilities and solid proficiency in Microsoft Office are important to performing well in this role.
• Language Proficiency — Proficiency in both written and spoken English and Bahasa Malaysia is required, as this role involves working in a Malaysian business environment where communication in both languages supports effective collaboration with stakeholders across the organisation.

All information received will be kept strictly confidential and will be used only for employment-related purposes.