IT Audit Lead: Controls, ISMS & ISO 27001

Commerce Dot Com; Selangor; On-site; MYR 120,000 - 180,000; Full time

Benefits offered by this job

Medical benefits for you and family

Group term life coverage

Meal credit

In-house sports courts

Events and gatherings

Healthy work-life balance

Job summary

Commerce Dot Com is seeking an experienced IT Audit professional to lead comprehensive audits spanning ITGCs, applications, infrastructure, networks, and cybersecurity. The role covers ISMS audits under ISO/IEC 27001, risk assessment, and reporting with action plans.

You will plan, execute and supervise audits, review working papers, and ensure compliance with Internal Audit standards. The ideal candidate brings 5+ years of IT audit experience and strong communication skills.

Qualifications

• Bachelor’s Degree in IT/CS/IS or related discipline.
• Certifications such as CISA/CIA/CISSP/CRISC are advantageous.
• Knowledge of IT audit methodologies, internal auditing, IT general controls.
• Familiarity with ISO/IEC 27001 and ISMS internal audit requirements is a plus.
• Minimum 5 years of relevant IT audit experience.
• Hands-on auditing ITGCs, app systems, infra, networks, cyber security, DR/BC.
• Experience leading audits and reviewing team work.

Responsibilities

• Plan, lead and execute IT audits across ITGC, apps, infrastructure and cyber.
• Evaluate control design and operating effectiveness and assess root causes.
• Prepare and review audit working papers per standards.
• Prepare audit reports and obtain management action plans.
• Follow up on audit observations and validate corrective actions.
• Participate in ISMS internal audits (ISO/IEC 27001) and report nonconformities.
• Support annual IT audit planning and keep up with regulatory requirements.

Skills

IT auditing

IT general controls

Information security

ISMS

COBIT

ISO/IEC 27001

Analytical skills

Report writing

Communication

Leadership

Time management

Education

Bachelor’s degree in IT/CS/IS

CISA

CIA

CISSP

CRISC

Job description

Commerce Dot Com is seeking an experienced IT Audit professional to lead comprehensive audits spanning ITGCs, applications, infrastructure, networks, and cybersecurity. The role covers ISMS audits under ISO/IEC 27001, risk assessment, and reporting with action plans.

You will plan, execute and supervise audits, review working papers, and ensure compliance with Internal Audit standards. The ideal candidate brings 5+ years of IT audit experience and strong communication skills.