Information Technology Audit Manager

NTT DATA Payment Services; Kuala Lumpur; On-site; MYR 90,000 - 130,000; Full time

Job summary

NTT Data Payment Services in Malaysia seeks an IT Audit professional to evaluate IT controls, cybersecurity measures, and regulatory compliance within the payment services ecosystem. You will plan and execute audits, assess BNM/MAPD/MCIPD requirements, and provide independent assurance on IT risk management.

The role requires 5+ years in IT audit, strong knowledge of infrastructure and payment systems, and excellent communication and reporting skills. Fluent in English and Bahasa Malaysia.

Qualifications

• Bachelor’s Degree in IT, cybersecurity or related field with professional certifications.
• Experience in IT audit, regulatory compliance and payment systems.
• Strong knowledge of IT infrastructure, security controls and related standards.

Responsibilities

• IT Audit Planning & Execution across infrastructure, applications, databases, projects and cybersecurity.
• Regulatory Compliance assessment focusing on BNM RMIT, MAPD and MCIPD and PCI DSS / ISO 27001.
• Reporting with root-cause analysis and presenting to senior management.
• Stakeholder engagement with IT, Information Security, CISO and Compliance teams.

Skills

Analytical mindset

Strong communication

Report writing skills

IT infrastructure knowledge

Security controls knowledge

Education

Bachelor’s Degree in Information Technology or Cybersecurity

CISA, CISM, CISSP and ISO 27001 certifications

Job description

To evaluate the adequacy and effectiveness of IT controls, cybersecurity measures, and regulatory compliance within the organization. The role supports GIA’s mission to provide independent assurance over IT governance, risk management, and internal controls, particularly within the payment services ecosystem.

Job Responsibilities :-

1. IT Audit Planning & Execution

• Plan, execute, and document IT audits covering infrastructure, applications, databases, IT project implementation and cybersecurity.
• Perform audits in accordance with risk-based audit plans and relevant professional standards.
• Identify control weaknesses and propose practical, risk-based recommendations.

2. Regulatory Compliance

• Independently assess IT-related compliance with Bank Negara Malaysia (BNM) regulatory requirements, with a focus on RMiT, MAPD, and MCIPD, to ensure alignment with regulatory expectations and identify potential control gaps.
• Review and evaluate the adequacy and effectiveness of controls implemented to meet the requirements of PCI DSS, ISO/IEC 27001, and other applicable industry standards.
• Assess the effectiveness of management’s oversight and controls over IT-related risks, including those associated with cybersecurity, technology infrastructure, change management, and third-party service providers, to ensure risks are appropriately identified, mitigated, and monitored.
• Evaluate the adequacy and effectiveness of risk mitigation strategies and the robustness of business continuity and disaster recovery processes.
• Provide independent assurance on the organization's IT Security Risk Assessment (ITSA) process, ensuring aligns with regulatory expectations and industry best practices.

4. Reporting & Follow-up

• Prepare clear and concise audit reports with actionable findings and root cause analysis.
• Present audit outcomes to stakeholders, including senior management and relevant committees.
• Monitor remediation progress and verify closure of audit issues.

5. Stakeholder Engagement & Advisory

• Liaise with IT, Information Security, CISO, and Compliance departments.
• Provide advisory input on IT risk, control design, and compliance matters.
• Stay abreast of emerging threats, technologies, and regulatory changes relevant to the payment industry.

Job Requirements :-

• Candidate must possess at least Bachelor’s Degree in Information Technology, Cybersecurity or related field – CISA, CISM, CISSP and ISO 27001.
• Candidate must possess with a minimum five (5) years of working experience in IT audit, preferably in financial services or payment industry.
• Strong knowledge of IT Infrastructure, security controls and payment systems.
• Analytical mindset with attention to detail.
• Strong communication and report writing skills.
• Ability to work independently and manage multiple assignments.
• Good command in English and Bahasa Malaysia.

Pay range and compensation package

Salary and compensation details will be discussed during the interview process.

Equal Opportunity Statement

NTT Data Payment Services is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.