Internal Audit (Operational and IT)

Tune Protect Group Berhad; Kuala Lumpur; On-site; MYR 180,000 - 320,000; Full time

Benefits offered by this job

Medical

Miscellaneous allowance

Education support

Dental

Sports

Vision

Overseas project opportunities

Job summary

Tune Protect Group Berhad in Malaysia seeks a seasoned Head of Risk-based Internal Audit to lead governance, risk management, internal controls and compliance assurance across the Group.

You will oversee IT and operational audits from planning to reporting, identify key risks and control gaps, and drive continuous improvement through technology-enabled auditing and analytics. Strong leadership and collaboration with management are essential.

Qualifications

• Diploma/bachelor’s degree/Professional Degree in IT, Commerce or related fields.
• 7+ years in Internal/External Audit, with IT Audit experience; operational audit exposure preferred.
• Knowledge of risk management, governance and internal audit practices.
• Awareness of acts/regulations related to general insurance; familiarity with BNM, LFSA, Bursa.
• Proficient in MS Office (Excel, Word, PowerPoint).

Responsibilities

• Lead risk-based audit engagements across operational, regulatory, financial, ad-hoc and investigative reviews.
• Assess governance, risk management, internal controls and compliance with applicable requirements.
• Oversee end-to-end audit lifecycle from planning to reporting and follow-up.
• Prepare audit documentation including risk, letters, programs, working papers and reports.
• Monitor corrective actions and report status to management and governance committees.
• Provide leadership, coaching and guidance to audit team; develop capability.
• Ensure compliance with Internal Audit Charter, Audit Manual and standards.
• Support annual risk-based plan development and special reviews as directed.

Skills

Leadership

Analytical skills

Communication skills

Risk management

Interpersonal skills

Integrity & ethics

Education

Diploma/Bachelor's/Professional degree in IT, Commerce or related fields

Tools

Excel

Word

PowerPoint

Job description

This person is responsible for leading risk-based operational and IT audits across the Group, providing independent assurance on governance, risk management, internal controls and compliance. The role oversees audit engagements from planning to reporting, identifies key risks and control gaps, and supports continuous improvement through technology-enabled auditing and team leadership.

JOB RESPONSIBILITIES:

Operational Audit Management

• Lead and manage risk-based audit engagements in accordance with the approved annual audit plan, including operational, regulatory, financial, ad-hoc and investigative reviews.
• Assess the adequacy and effectiveness of governance, risk management, internal controls and compliance with applicable legal, regulatory and internal requirements.
• Oversee the end-to-end audit lifecycle, including planning, fieldwork, reporting and follow-up activities to ensure timely and quality audit delivery
• Prepare audit documentation, including inherent risk documentation, engagement letter, audit program steps, working papers, findings and reports, ensuring adherence to Internal Audit standards and methodology.
• Monitor the implementation of agreed corrective actions and report on the status of audit issues to Management and relevant governance committees.
• Provide leadership, coaching and technical guidance to audit team members, supporting capability development and knowledge sharing.
• Ensure compliance with the Internal Audit Charter, Audit Manual, departmental procedures and professional auditing standards.
• Support the development and execution of the annual risk-based audit plan and undertake special reviews, investigations and other assignments as directed by the Group Head Internal Audit.

Technology and IT Audit

• Lead IT audit engagements covering IT governance, IT General Controls (ITGC), cybersecurity, infrastructure, cloud environments, applications and data management.
• Assess the effectiveness of information security, access management, change management, system development lifecycle, disaster recovery and business continuity controls.
• Evaluate compliance with technology-related regulatory requirements and industry standards, including Bank Negara Malaysia's Risk Management in Technology (RMiT) framework.
• Review major technology initiatives, system implementations and digital transformation programmes to identify emerging risks and control gaps.
• Leverage data analytics and continuous auditing techniques to enhance audit coverage, identify risk indicators and improve audit effectiveness.

JOB REQUIREMENTS:

• Candidate must possess at least Diploma/bachelor’s degree/Professional Degree in related fields (i.e. IT, Commerce etc.).
• Years of Experience: More than 7 years working experience in the Internal / External Audit field in IT Audit operation. Having experience of performing Operational Audit is highly recommended.
• Knowledge of risk management, corporate governance and internal audit practices.
• Knowledge of all relevant Acts, regulations and guidelines related to General Insurance, BNM, LFSA, Bursa, etc.
• High standard of computer literacy (i.e. Excel, Word, Power Point etc.).
• Strong analytical skills with aptitude for details and internal controls.
• Good leadership skills with integrity and commitment to high ethical and professional standards. In this aspect, well versed with the Standards for the Professional Practice of Internal Auditing.
• Possess good interpersonal, communication, negotiation and report writing skills.
• Ability to interact with Management at all levels.
• Ability to work under tight deadlines and withstand work pressure. In this aspect, able to work evenings and weekends, as required.
• Ability to work effectively, both independently and in teams.
• Possess own transport (where necessary) and willing to travel nationwide for audit purposes.

Unlock job insights

Hirer responsiveness Salary match Number of applicants

An aspiring digital insurer in the region, Tune Protect Group operates both Digital Global Travel Insurance and General Insurance businesses in Malaysia (Tune Protect Malaysia), Thailand (Tune Protect Thailand) the United Arab Emirates (Tune Protect EMEIA - Europe, Middle East, India and Africa). With footprints in more than 50 countries globally, we offer a range of tailored non-life insurance coverage products that are relevant to the needs of customers, protecting their life’s journeys and adventures. In line with our tagline, “Insurance Simplified”, we simplify and create a more efficient means of access and engagement through digital channels to our products. We remain committed to be there for our customers, shareholders, employees, and business partners for the long-term.

An aspiring digital insurer in the region, Tune Protect Group operates both Digital Global Travel Insurance and General Insurance businesses in Malaysia (Tune Protect Malaysia), Thailand (Tune Protect Thailand) the United Arab Emirates (Tune Protect EMEIA - Europe, Middle East, India and Africa). With footprints in more than 50 countries globally, we offer a range of tailored non-life insurance coverage products that are relevant to the needs of customers, protecting their life’s journeys and adventures. In line with our tagline, “Insurance Simplified”, we simplify and create a more efficient means of access and engagement through digital channels to our products. We remain committed to be there for our customers, shareholders, employees, and business partners for the long-term.

Perks and benefits Medical Miscellaneous allowance Education support Dental Sports (e.g. Gym) Vision Opportunity to work on overseas projects