Internal Audit Manager

CG Computers Sdn Bhd; Penang; On-site; MYR 120,000 - 180,000; Full time

Job summary

CG Computers Sdn Bhd, a leading Apple destination in Malaysia with a nationwide retail footprint, seeks an IA Manager to establish and lead the Internal Audit Department. You will design the charter, risk-based plans, and governance framework to strengthen control environment across outlets and operations.

You will partner with management to map processes, implement LOA templates, and coordinate Group Internal Audit engagements while maintaining independence and objectivity.

Qualifications

• Degree in Accounting, Finance, Business or a related field.
• Professional qualification such as ACCA, CA (MIA), CPA (MICPA / CPA Australia) or ICAEW; CIA, CISA or CRMA is an advantage.
• Membership of IIA Malaysia (or willingness to obtain).
• At least 7–8 years in internal audit, risk or controls.
• 2–3 years in a senior or managerial role.
• Hands-on experience setting up an IA function or writing SOPs, policies and LOA frameworks from scratch.

Responsibilities

• Set up the internal audit function and annual risk-based plan.
• Advise on SOPs, LOA matrices and control frameworks.
• Coordinate with Group Internal Audit and manage audits.
• Lead risk-based audits across operations, finance, IT.
• Issue clear audit reports and track remediation.
• Support risk management and stay aligned with standards.

Skills

Builder mindset

Advisor and coach

Stakeholder management

Integrity and objectivity

Clear communication

Organised and self-driven

Education

Degree in Accounting/Finance/Business or related

ACCA/CA/CPA or equivalent (advantage)

Membership of IIA Malaysia (or willing)

Tools

Power BI

Audit tools

Job description

The Internal Audit (IA) Manager is responsible for establishing the Internal Audit Department for the company. The Department will provide an independent and objective evaluation of the organisation's operations, risk management, internal control procedures and governance processes, and will support the Group in strengthening its overall control environment.

Key responsibilities

1. Set up the internal audit function

Draft the Internal Audit Charter (mandate, authority, independence, scope) for approval by the Audit Committee, aligned with the Group IA Charter.

Adopt Group IA methodology, templates and tools; adapt them to the company's size and business.

Build the audit universe and run the first company-wide risk assessment with management.

Prepare an annual risk-based audit plan and resource budget for approval.

Set up IA documentation, working-paper filing, finding-rating criteria and issue-tracking.

2. Guide department heads on SOPs, policies and controls

Run walkthroughs with each department to map key retail processes (e.g. store operations and cash handling, point-of-sale (POS) and pricing / promotions, merchandising and purchasing, supplier rebates and consignment, inventory and stock counts, warehouse and logistics, e-commerce, payroll and staff claims, finance & treasury, IT).

Identify gaps in documentation, segregation of duties, approvals and controls.

Advise department heads on drafting SOPs, policies and a Limits of Authority (LOA) matrix; provide templates and review drafts.

Recommend a policy framework: document hierarchy, owners, approval routing, version control and review cycle.

Train staff on internal control, risk awareness and their role in audits.

Stay advisory: ownership of SOPs and controls remains with management, so IA independence is protected.

3. Liaise with Group Internal Audit

Act as the company's single point of contact for Group IA on all audit-related matters.

Coordinate Group IA audits: scoping, document requests, fieldwork logistics, exit meetings and management responses.

Keep a central log of Group IA requests, findings and agreed actions, and make sure departments respond on time and in full.

Brief the MD and department heads before and after each Group IA engagement, and represent the company in Group IA meetings.

Report company audit plans, results and issue status to Group IA on the agreed cycle (e.g. monthly / quarterly).

Align with Group policies, methodology, reporting formats and quality requirements.

Escalate significant control failures, fraud indicators or compliance breaches to Group IA promptly.

Support Group-wide reviews, thematic audits and special investigations as requested.

4. Plan and execute audits

Lead risk-based operational, financial, compliance and IT-general-control audits per the approved plan.

Perform retail-specific reviews such as surprise cash and stock counts at outlets, shrinkage and stock-loss analysis, and POS exception analytics (voids, refunds, discounts, price overrides).

Test design and operating effectiveness of controls; document evidence in working papers.

Agree findings, root causes and practical action plans with process owners.

Carry out ad hoc reviews and investigations requested by management, the Audit Committee or Group IA.

5. Report and follow up

Issue clear, timely audit reports with rated findings.

Present audit results and the status of open issues to management and the Audit Committee.

Track agreed actions to closure and validate remediation.

Coordinate with external auditors and regulators where relevant, to avoid duplicated effort.

6. Governance, risk and quality

Support management on risk management, fraud prevention (including outlet-level fraud and loss prevention) and whistleblowing processes.

Maintain the IA quality assurance and improvement programme, in line with Group requirements.

Keep up to date with IIA standards, regulatory requirements (e.g. Bursa Malaysia guidance, if applicable) and industry practice.

Requirements

Qualifications

Degree in Accounting, Finance, Business or a related field.

Professional qualification such as ACCA, CA (MIA), CPA (MICPA / CPA Australia) or ICAEW; CIA, CISA or CRMA is an advantage.

Membership of IIA Malaysia (or willingness to obtain).

Experience

At least 7–8 years in internal audit, risk or controls, including 2–3 years in a senior or managerial role.

Hands-on experience setting up an IA function or writing SOPs, policies and LOA frameworks from scratch – strongly preferred.

Experience working with or within a group / regional IA structure.

Big 4 or established in-house IA background; experience in retail, FMCG or other multi-outlet consumer businesses is strongly preferred.

Technical skills

Sound knowledge of the IIA Global Internal Audit Standards, COSO Internal Control and risk management frameworks.

Strong process mapping and control design skills across finance and operations.

Working knowledge of IT general controls and data analytics (Excel, Power BI or audit tools).

Awareness of Malaysian regulatory requirements (e.g. Companies Act 2016, MACC Act Section 17A adequate procedures, Personal Data Protection Act 2010 for customer data, Bursa Malaysia Listing Requirements where applicable).

Core competencies

Builder mindset – able to work without existing structures and create practical, right-sized ones.

Advisor and coach – explains controls in simple business terms and helps department heads, rather than policing them.

Stakeholder management – confident with senior management, the Audit Committee and Group IA.

Integrity and objectivity – keeps independence, handles sensitive matters discreetly.

Clear communication – strong report writing and presentation skills in English; Bahasa Malaysia and/or Mandarin an advantage.

Organised and self-driven – manages multiple departments, outlets and priorities with limited support; willing to travel to outlets.

Unlock job insights

Hirer responsiveness Salary match Number of applicants

Information Technology Services 1,001-5,000 employees

CG Computers Sdn Bhd was established in 1995 dedicated to serving the Apple market. In 2014, CG Computers entered the Android market by launching Urban Republic, a multi-brand mobile and gadget lifestyle store.

Today, CG Computers carries 7 brands under its belt including Switch, Switch+, Urban Republic, Samsung, Sony, Xiaomi and Huawei, and is incredibly humbled to have over 250 outlets across Malaysia and Singapore, serving customers from all walks of life. We are proud to call ourselves the “Apple Destination” for our customers to answer all their needs and questions. We also aim to be the go-to destination for all things smartphones and to provide the best retail experience nationwide.

CG Computers Sdn Bhd was established in 1995 dedicated to serving the Apple market. In 2014, CG Computers entered the Android market by launching Urban Republic, a multi-brand mobile and gadget lifestyle store.

Today, CG Computers carries 7 brands under its belt including Switch, Switch+, Urban Republic, Samsung, Sony, Xiaomi and Huawei, and is incredibly humbled to have over 250 outlets across Malaysia and Singapore, serving customers from all walks of life. We are proud to call ourselves the “Apple Destination” for our customers to answer all their needs and questions. We also aim to be the go-to destination for all things smartphones and to provide the best retail experience nationwide.

To help fast track investigation, please include here any other relevant details that prompted you to report this job ad as fraudulent / misleading / discriminatory / salary below minimum wage.

What can I earn as an Internal Audit Manager