Internal Audit (Operational and IT)

Tune Protect Group; Kuala Lumpur; On-site; MYR 180,000 - 260,000; Full time

Job summary

Tune Protect Group in Kuala Lumpur, Malaysia seeks a seasoned Internal Audit leader to oversee risk-based audits across the Group, including IT governance, controls and compliance. You will manage engagements from planning to reporting and coach the audit team.

Responsibilities include assessing governance, risk management, internal controls and regulatory compliance, leading IT audits (ITGC, cybersecurity, data management), and leveraging data analytics to enhance audit coverage.

Qualifications

• More than 7 years in Internal/External Audit, with IT audit experience.
• Knowledge of governance, risk management and internal controls.
• Familiarity with regulatory frameworks in insurance/audit domains.

Responsibilities

• Lead risk-based audit engagements from planning to reporting.
• Assess governance, risk management, internal controls and compliance.
• Oversee end-to-end audit lifecycle and issue follow-up.
• Lead IT audit engagements covering ITGC, cybersecurity, and data management.
• Leverage data analytics to enhance audit coverage.
• Travel nationwide for audit purposes.

Skills

Leadership

Audit management

IT audit

Communication

Education

Bachelor's degree in IT/Commerce

Job description

This person is responsible for leading risk-based operational and IT audits across the Group, providing independent assurance on governance, risk management, internal controls and compliance. The role oversees audit engagements from planning to reporting, identifies key risks and control gaps, and supports continuous improvement through technology-enabled auditing and team leadership.

Job Responsibilities

Operational Audit Management

• Lead and manage risk-based audit engagements in accordance with the approved annual audit plan, including operational, regulatory, financial, ad-hoc and investigative reviews.
• Assess the adequacy and effectiveness of governance, risk management, internal controls and compliance with applicable legal, regulatory and internal requirements.
• Oversee the end-to-end audit lifecycle, including planning, fieldwork, reporting and follow-up activities to ensure timely and quality audit delivery
• Prepare audit documentation, including inherent risk documentation, engagement letter, audit program steps, working papers, findings and reports, ensuring adherence to Internal Audit standards and methodology.
• Monitor the implementation of agreed corrective actions and report on the status of audit issues to Management and relevant governance committees.
• Provide leadership, coaching and technical guidance to audit team members, supporting capability development and knowledge sharing.
• Ensure compliance with the Internal Audit Charter, Audit Manual, departmental procedures and professional auditing standards.
• Support the development and execution of the annual risk-based audit plan and undertake special reviews, investigations and other assignments as directed by the Group Head Internal Audit.

Technology and IT Audit

• Lead IT audit engagements covering IT governance, IT General Controls (ITGC), cybersecurity, infrastructure, cloud environments, applications and data management.
• Assess the effectiveness of information security, access management, change management, system development lifecycle, disaster recovery and business continuity controls.
• Evaluate compliance with technology-related regulatory requirements and industry standards, including Bank Negara Malaysia's Risk Management in Technology (RMiT) framework.
• Review major technology initiatives, system implementations and digital transformation programmes to identify emerging risks and control gaps.
• Leverage data analytics and continuous auditing techniques to enhance audit coverage, identify risk indicators and improve audit effectiveness.

Job Requirements

• Candidate must possess at least Diploma/bachelor’s degree/Professional Degree in related fields (i.e. IT, Commerce etc.).
• Years of Experience: More than 7 years working experience in the Internal / External Audit field in IT Audit operation. Having experience of performing Operational Audit is highly recommended.
• Knowledge of risk management, corporate governance and internal audit practices.
• Knowledge of all relevant Acts, regulations and guidelines related to General Insurance, BNM, LFSA, Bursa, etc.
• High standard of computer literacy (i.e. Excel, Word, Power Point etc.).
• Strong analytical skills with aptitude for details and internal controls.
• Good leadership skills with integrity and commitment to high ethical and professional standards. In this aspect, well versed with the Standards for the Professional Practice of Internal Auditing.
• Possess good interpersonal, communication, negotiation and report writing skills.
• Ability to interact with Management at all levels.
• Ability to work under tight deadlines and withstand work pressure. In this aspect, able to work evenings and weekends, as required.
• Ability to work effectively, both independently and in teams.
• Possess own transport (where necessary) and willing to travel nationwide for audit purposes.