IT Associate (GRC)

AGES Systems Gelderfarenit; Kuala Lumpur; On-site; MYR 42,000 - 62,000; Full time

Job summary

AGES Systems Gelderfarenit is seeking an Audit Associate in Kuala Lumpur, Malaysia to support pre-audit assessments and attestation-based audits for global clients handling card data. You will engage in CSA/Cyber Trust Mark readiness and assist in identifying control gaps across PCI programs, SWIFT, and IT infrastructure.

The role requires a bachelor’s degree, willingness to travel overseas weekly or bi-weekly, and a drive to grow in cybersecurity, risk consulting, and governance.

Qualifications

• Bachelor’s degree in any field. Fresh graduates with strong interest in IT are welcome.
• Certifications such as CISA, CISM, ISMS, GSNA, ISO 27001, ACCA, CIMA or IIA(CIA) are a plus.
• Strong analytical skills to interpret technical data and identify patterns.
• Excellent written and verbal communication to document audit findings.

Responsibilities

• Support internal and external pre-audit assessments and attestation-based / certification audits across PCI programs.
• Support and deliver CSA Cyber Essentials Mark, and Cyber Trust Mark readiness and implementation.
• Identify control gaps and risks against PCI DSS, SWIFT, and related regulations.
• Prepare detailed audit reports with findings, evidence, and remediation recommendations.
• Follow up with stakeholders to verify remediation implementation.
• Develop governance frameworks and cybersecurity policies and training programs.
• Pursue industrial certifications to become a certified auditor.

Skills

Analytical skills

Communication skills

Education

Bachelor’s degree

Tools

CISA

CISM

ISMS

GSNA

ISO 27001

ACCA

CIMA

IIA CIA

Job description

Founded in the Year 2004, AGES possesses extensive experience collaborating with prominent payment brands such as MasterCard International, Visa International, American Express Company, and UnionPay International on compliance assessments. Our team possesses the expertise and experience to guide our clientele through the necessary compliance assessments to align with regulatory requirements.

We offer comprehensive audit services, including Payment Card Industry (PCI) Card Production and Provisioning (CP), PCI Data Security Scheme (DSS), PCI 3D Secure (3DS), PCI P2PE / Token Service Provider(TSP), SWIFT Customer Security Program (CSP), ISO security programs, and other relevant standards.

Role

As our Audit Associate, you will travel overseas frequently and support attestation-based audits against the Payment Cards Industry Security Standards Council (formed by MasterCard, Visa, Amex, JCB & Discover) framework across our portfolio of clients globally who stores, processes, or transmits credit card data to maintain a secure environment and strict compliance in their physical and logical security measures.

The Right Candidate

If you are keen to build a broad, high-level view of how business systems, cybersecurity and corporate governance work hand in hand together in an organisation and build valuable skills in high demand areas such as cybersecurity and data analytics, at the same time sharpening your communication, problem-solving, and analytical capabilities, this role opens doors to cybersecurity, risk consulting, or corporate compliance for you in future.

Responsibilities

Support internal and external pre-audit assessments and attestation-based / certification audits across various PCI programs involving payment systems, card vendors environment, and IT infrastructure.

Support and deliver CSA Cyber Essentials Mark, and Cyber Trust Mark readiness and implementation engagements.

Support compliance and identify control gaps and risks against relevant frameworks and regulations, including PCI CPP, PCI DSS, SWIFT and VAPT.

Prepare detailed audit reports documenting findings, evidence, and recommendations for remediation actions.

Follow up with stakeholders to verify implementation of corrective measures and completion of remediation.

Develop governance frameworks, cybersecurity policies, security policies and security training programs.

Undergo industrial professional certifications to be a certified auditor in the training roadmap.

Required Competency

Bachelor’s degree in any field of study. Fresh graduates with a strong aptitude and interest to pursue a career in IT are welcome to apply.

Certified CISA, CISM, ISMS, GSNA, ISO 27001, ACCA, CIMA or IIA(CIA) is a plus.

Possess advanced analytical skills to interpret technical data, identify patterns, and draw evidence-based conclusions.

Strong written and verbal communication skills to document and present audit findings effectively.

Commitment

Weekly or bi-weekly overseas traveling is required for audit assignments.

You are required to sign a training bond for the external industry-related courses, certifications and industrial training that we provide for you.

Find out more about us at www.ages-sg.com.

This is an excellent platform to build a broad, high-level view of how business systems, cybersecurity and corporate governance work hand in hand together in an organisation.

With the right attitude, you will build a strong career versatility and attain professional qualifications with highly respected credentials through our Company that set a solid foundation and pave the way for your future.