IT Audit Manager

QI Group; Petaling Jaya; On-site; MYR 180,000 - 240,000; Full time

Job summary

QI Group in Malaysia is seeking an IT Audit Manager to lead the evaluation and enhancement of IT controls, security, and governance across the organization.

You will plan and execute audits, review policies, and mentor the audit team while collaborating with IT security, risk, and business units; willingness to travel to engagements is expected.

Qualifications

• Bachelor’s degree or equivalent in Information Technology, Computer Science, Accounting or related field.
• Professional certifications such as CISA, CISSP, CISM or CRISC preferred.
• 6–10 years IT audit experience, preferably in FMCG/retail or direct selling.
• Extensive knowledge of IT general and application controls; cybersecurity and information security; governance and risk management; change management; BC/DR; COBIT, ISO/IEC 27001, NIST, ITIL.

Responsibilities

• Plan and execute IT audits based on risk assessments.
• Audit IT systems, applications, networks, security controls, databases, cloud and operations.
• Evaluate governance, cybersecurity measures and data protection policies.
• Review controls, data integrity and automated processes.
• Perform penetration testing and vulnerability assessments.
• Prepare audit reports and present findings to senior management.
• Lead and mentor IT audit team; drive improvements and corrective actions.
• Travel to audit engagements as required.

Skills

IT audit experience

Risk management

Cybersecurity knowledge

Data protection awareness

Analytical skills

Report writing

Leadership

Independent worker

Education

Bachelor’s degree in IT/CS/Accounting

CISA/CISSP/CISM/CRISC preferred

Tools

IT audit tools

Data analytics tools

Penetration testing tools

Microsoft Office

Job description

The IT Audit Manager will be responsible for evaluating and improving the effectiveness of IT controls, security, and governance processes within the organization. This role involves conducting IT audits, ensuring compliance with IT policies, identifying vulnerabilities, and providing recommendations to enhance cybersecurity and operational efficiency. The individual will play a key role in assessing risks related to IT infrastructure, applications, and data security.

Responsibilities & Accountabilities

IT Audit Planning & Execution:

Develop and execute IT audit plans based on risk assessments.

Conduct audits of IT systems, applications, networks, security controls, applications, databases, cloud environment, system development and IT Operations

Evaluate IT governance frameworks, cybersecurity measures, and data protection policies.

Review application controls, system interfaces, data integrity and automated business processes.

Standard knowledge on AI assurance and policy framework.

Identify weaknesses in IT controls and recommend process improvements.

Identify IT risks and vulnerabilities related to cybersecurity, data integrity, and access management.

Ensure compliance with IT policies, regulatory requirements, and industry best practices.

Assess IT disaster recovery and business continuity plans for effectiveness.

Monitor adherence to data protection laws such as GDPR and other relevant regulations.

Cybersecurity & Fraud Prevention:

Assess the effectiveness of cybersecurity frameworks and suggest enhancements.

Investigate potential IT security breaches and recommend corrective actions.

Develop and implement fraud detection mechanisms within IT systems.

Conduct penetration testing and vulnerability assessments.

Prepare audit reports highlighting IT risks, findings, and recommendations.

Present audit results to senior management and track corrective actions.

Provide advisory support to IT and business units on improving security and compliance.

Process Improvement & Leadership:

Identify opportunities to optimize IT operations and enhance security frameworks.

Work closely with IT teams to implement effective control measures.

Stay updated with evolving cyber threats, IT regulations, and emerging technologies.

Lead and mentor IT audit team members, fostering a culture of continuous improvement.

Requirements:

Bachelor’s degree in Information Technology, Computer Science, Accounting, or a related field.

Professional certifications such as CISA, CISSP, CISM, or CRISC preferred.

Minimum of 6-10 years of IT audit experience, preferably in a direct selling, FMCG, or retail environment.

Strong knowledge of IT general controls and application controls; cybersecurity and information security; IT governance and technology risk management; system development and change management; business continuity and disaster recovery; and relevant standards and frameworks, including COBIT, ISO/IEC 27001, NIST and ITIL.

Experience with IT audit tools, data analytics, and penetration testing methodologies.

Strong analytical, problem-solving and report-writing skills.

Proficiency in Microsoft Office Suite, IT audit tools, and security software.

High ethical standards and professional integrity.

Ability to work independently and manage multiple IT audit assignments.

Strong attention to detail and organizational skills.

Maintain confidentiality and objectivity in all IT audit activities.

Demonstrate initiative and accountability in identifying and mitigating IT risks.

Collaborate with IT, security, and business teams to enhance risk awareness.

Be willing to travel for IT audit engagements, as required.

*Join us to lead the IT audit function and ensure robust cybersecurity, compliance, and governance*.

A company’s competitive edge lies in its ability and desire to evolve; to keep abreast of advancements in the industries within which it operates; to innovate; and to dream big.

A company’s competitive edge lies in its ability and desire to evolve; to keep abreast of advancements in the industries within which it operates; to innovate; and to dream big.