Information Technology Audit Manager (Malaysia/Philippines/India)

QI Group; Petaling Jaya; On-site; MYR 180,000 - 230,000; Full time

Job summary

QI Group seeks an IT Audit Manager to lead evaluation and improvement of IT controls, security, and governance. This role will conduct IT audits, ensure policy compliance, identify vulnerabilities, and provide recommendations to boost cybersecurity and operational efficiency.

Based in Malaysia/Philippines/India, location flexibility may apply. The candidate will assess risks across IT infrastructure, applications, and data security, and will travel for audit engagements as required.

Qualifications

• Bachelor’s degree in IT, CS, accounting, or related field.
• CISA, CISSP, CISM, or CRISC preferred.
• 6–10 years IT audit experience.
• Strong knowledge of COBIT, ISO/IEC 27001, NIST, and ITIL.
• Experience with IT audit tools and data analytics.

Responsibilities

• Develop and execute IT audit plans based on risk assessments.
• Audit IT systems, networks, security controls, applications, databases, cloud env, and IT Operations.
• Evaluate IT governance, cybersecurity measures, and data protection policies.
• Review application controls, data integrity, and automated processes.
• Identify weaknesses in IT controls and recommend improvements.
• Identify IT risks and vulnerabilities related to cybersecurity, data integrity, and access management.
• Ensure compliance with IT policies, regulatory requirements, and best practices.
• Assess disaster recovery and business continuity plans.

Skills

Risk management

Cybersecurity

Audit leadership

Data analytics

Education

Bachelor's degree in IT

Tools

IT audit tools

Security software

Data analytics tools

Job description

The IT Audit Manager will be responsible for evaluating and improving the effectiveness of IT controls, security, and governance processes within the organization. This role involves conducting IT audits, ensuring compliance with IT policies, identifying vulnerabilities, and providing recommendations to enhance cybersecurity and operational efficiency. The individual will play a key role in assessing risks related to IT infrastructure, applications, and data security. This role could be based in Malaysia/Philippines/India.

Responsibilities & Accountabilities

IT Audit Planning & Execution:

• Develop and execute IT audit plans based on risk assessments.
• Conduct audits of IT systems, applications, networks, security controls, applications, databases, cloud environment, system development and IT Operations
• Evaluate IT governance frameworks, cybersecurity measures, and data protection policies.
• Review application controls, system interfaces, data integrity and automated business processes.
• Standard knowledge on AI assurance and policy framework.
• Identify weaknesses in IT controls and recommend process improvements.
• Identify IT risks and vulnerabilities related to cybersecurity, data integrity, and access management.
• Ensure compliance with IT policies, regulatory requirements, and industry best practices.
• Assess IT disaster recovery and business continuity plans for effectiveness.
• Monitor adherence to data protection laws such as GDPR and other relevant regulations.

Cybersecurity & Fraud Prevention:

• Assess the effectiveness of cybersecurity frameworks and suggest enhancements.
• Investigate potential IT security breaches and recommend corrective actions.
• Develop and implement fraud detection mechanisms within IT systems.
• Conduct penetration testing and vulnerability assessments.
• Prepare audit reports highlighting IT risks, findings, and recommendations.
• Present audit results to senior management and track corrective actions.
• Provide advisory support to IT and business units on improving security and compliance.

Process Improvement & Leadership:

• Identify opportunities to optimize IT operations and enhance security frameworks.
• Work closely with IT teams to implement effective control measures.
• Stay updated with evolving cyber threats, IT regulations, and emerging technologies.
• Lead and mentor IT audit team members, fostering a culture of continuous improvement.

Requirements:

• Bachelor’s degree in Information Technology, Computer Science, Accounting, or a related field.
• Professional certifications such as CISA, CISSP, CISM, or CRISC preferred.
• Minimum of 6-10 years of IT audit experience, preferably in a direct selling, FMCG, or retail environment.
• Strong knowledge of IT general controls and application controls; cybersecurity and information security; IT governance and technology risk management; system development and change management; business continuity and disaster recovery; and relevant standards and frameworks, including COBIT, ISO/IEC 27001, NIST and ITIL.
• Experience with IT audit tools, data analytics, and penetration testing methodologies.
• Strong analytical, problem-solving and report-writing skills.
• Proficiency in Microsoft Office Suite, IT audit tools, and security software.
• High ethical standards and professional integrity.
• Ability to work independently and manage multiple IT audit assignments.
• Strong attention to detail and organizational skills.
• Maintain confidentiality and objectivity in all IT audit activities.
• Demonstrate initiative and accountability in identifying and mitigating IT risks.
• Collaborate with IT, security, and business teams to enhance risk awareness.
• Be willing to travel for IT audit engagements, as required.

Join us to lead the IT audit function and ensure robust cybersecurity, compliance, and governance.