IT Audit Manager

NTT DATA Payment Services; Selangor; On-site; MYR 150,000 - 200,000; Full time

Job summary

A leading company in the payment services sector is seeking an IT Audit Manager to evaluate IT controls, cybersecurity measures, and regulatory compliance. The role demands a minimum of five years in IT audit, with responsibilities encompassing audit planning, regulatory compliance assessments, and stakeholder engagement. Candidates should possess a Bachelor's Degree in IT or Cybersecurity, along with relevant certifications like CISA or CISSP. A strong analytical mindset and excellent communication skills are essential for success in this position.

Qualifications

• Minimum five (5) years of experience in IT audit, preferably in financial services.
• Strong knowledge of IT Infrastructure, security controls, and payment systems.
• Ability to work independently and manage multiple assignments.

Responsibilities

• Plan, execute, and document IT audits covering infrastructure and cybersecurity.
• Assess compliance with Bank Negara Malaysia regulatory requirements.
• Prepare audit reports with findings and present to stakeholders.

Skills

Analytical mindset

Attention to detail

Strong communication

Report writing skills

Education

Bachelor’s Degree in Information Technology

Cybersecurity

CISA certification

CISM certification

CISSP certification

ISO 27001 certification

Tools

PCI DSS

ISO/IEC 27001

Job description

To evaluate the adequacy and effectiveness of IT controls, cybersecurity measures, and regulatory compliance within the organization. The role supports GIA’s mission to provide independent assurance over IT governance, risk management, and internal controls, particularly within the payment services ecosystem.

Job Responsibilities :-

1. IT Audit Planning & Execution

Plan, execute, and document IT audits covering infrastructure, applications, databases, IT project implementation and cybersecurity.

Perform audits in accordance with risk-based audit plans and relevant professional standards.

Identify control weaknesses and propose practical, risk-based recommendations.

2. Regulatory Compliance

Independently assess IT-related compliance with Bank Negara Malaysia (BNM) regulatory requirements, with a focus on RMiT, MAPD, and MCIPD, to ensure alignment with regulatory expectations and identify potential control gaps.

Review and evaluate the adequacy and effectiveness of controls implemented to meet the requirements of PCI DSS, ISO/IEC 27001, and other applicable industry standards.

Assess the effectiveness of management’s oversight and controls over IT-related risks, including those associated with cybersecurity, technology infrastructure, change management, and third-party service providers, to ensure risks are appropriately identified, mitigated, and monitored.

Evaluate the adequacy and effectiveness of risk mitigation strategies and the robustness of business continuity and disaster recovery processes.

Provide independent assurance on the organization's IT Security Risk Assessment (ITSA) process, ensuring aligns with regulatory expectations and industry best practices.

4. Reporting & Follow-up

Prepare clear and concise audit reports with actionable findings and root cause analysis.

Present audit outcomes to stakeholders, including senior management and relevant committees.

Monitor remediation progress and verify closure of audit issues.

5. Stakeholder Engagement & Advisory

Liaise with IT, Information Security, CISO, and Compliance departments.

Provide advisory input on IT risk, control design, and compliance matters.

Stay abreast of emerging threats, technologies, and regulatory changes relevant to the payment industry.

Job Requirements :-

Candidate must possess with a minimum five (5) years of working experience in IT audit, preferably in financial services or payment industry.

Strong knowledge of IT Infrastructure, security controls and payment systems.

Analytical mindset with attention to detail.

Strong communication and report writing skills.

Ability to work independently and manage multiple assignments.

Good command in English and Bahasa Malaysia.

Education Requirements :-

Candidate must possess at least Bachelor’s Degree in Information Technology, Cybersecurity or related field – CISA, CISM, CISSP and ISO 27001.

Unlock job insights

Salary match Number of applicants Skills match

Your application will include the following questions:

Which of the following statements best describes your right to work in Malaysia? What's your expected monthly basic salary? Which of the following types of qualifications do you have? How many years' experience do you have as an Information Technology Audit Manager? Have you completed a Certified Information Systems Security Professional (CISSP) certification?

At NTT DATA Payment Services, we empower businesses across Southeast Asia with reliable, secure, and innovative payment solutions—both online & offline.

With a strong presence in Malaysia, the Philippines, and Thailand, our reach spans more than 480,000 payment touchpoints across the region. As a one-stop payment solutions provider, we serve businesses of all sizes, from retail to enterprise, delivering seamless transaction experiences backed by over 30 years of industry expertise.

As part of NTT DATA Japan, one of the world’s top 10 global IT service providers, we combine deep local insights with world-class technology and innovation to help businesses grow & succeed in the digital economy.

At NTT DATA Payment Services, we empower businesses across Southeast Asia with reliable, secure, and innovative payment solutions—both online & offline.

With a strong presence in Malaysia, the Philippines, and Thailand, our reach spans more than 480,000 payment touchpoints across the region. As a one-stop payment solutions provider, we serve businesses of all sizes, from retail to enterprise, delivering seamless transaction experiences backed by over 30 years of industry expertise.

As part of NTT DATA Japan, one of the world’s top 10 global IT service providers, we combine deep local insights with world-class technology and innovation to help businesses grow & succeed in the digital economy.

To help fast track investigation, please include here any other relevant details that prompted you to report this job ad as fraudulent / misleading / discriminatory.

Researching careers? Find all the information and tips you need on career advice.