IT Audit Lead — ISMS, ISO 27001 & Controls

COMMERCE DOT COM SDN. BHD.; Petaling Jaya; On-site; MYR 60,000 - 95,000; Full time

Benefits offered by this job

Medical benefits

Group term life

Meal credits

In-house sports court

Team events

Work‑life balance

Job summary

Commerce Dot Com Sdn. Bhd. in Malaysia is seeking an experienced IT Audit professional to plan, lead and execute comprehensive IT audits across ITGCs, applications, infrastructure and cybersecurity.

You will evaluate control design and operating effectiveness and report findings to management. The role requires 5+ years in IT audit or information security, with certifications such as CISA/CIA/CISSP. You will develop audit programmes, prepare working papers, and support ISO/IEC 27001 ISMS audits,

Qualifications

• Bachelor's degree in IT, CS, IS or related field.
• Professional certification such as CISA/CIA/CISSP/CRISC is an added advantage.
• Knowledge of IT audit methodologies, ITGCs, COBIT and ISO/IEC 27001.
• Minimum 5 years of IT audit or information security experience.
• Hands-on experience with IT operations, change management, disaster recovery.
• Experience in ISMS/internal audits is an added advantage.
• Ability to lead audits and review team work.

Responsibilities

• Plan, lead and execute IT audits including scope and programmes.
• Evaluate design and operating effectiveness of IT controls.
• Prepare audit working papers and final reports.
• Follow up on audit actions and obtain management action plans.
• Conduct ISMS internal audits per ISO/IEC 27001.
• Support annual IT audit planning and stay updated on tech/regulatory developments.

Skills

IT auditing

ITGC

Information security

Root-cause analysis

Documentation

Stakeholder management

Leadership

Education

Bachelor's Degree in Information Technology/Computer Science/Information Systems

Tools

COBIT

ISO/IEC 27001

ISMS

Job description

Commerce Dot Com Sdn. Bhd. in Malaysia is seeking an experienced IT Audit professional to plan, lead and execute comprehensive IT audits across ITGCs, applications, infrastructure and cybersecurity.

You will evaluate control design and operating effectiveness and report findings to management. The role requires 5+ years in IT audit or information security, with certifications such as CISA/CIA/CISSP. You will develop audit programmes, prepare working papers, and support ISO/IEC 27001 ISMS audits,