IT Compliance & SOX Audit Analyst (SAP/GRC)

ThunderSoft; Penang; On-site; MYR 90,000 - 150,000; Full time

Job summary

ThunderSoft in Malaysia is seeking an experienced IT Audit and Compliance professional to strengthen our ITGC controls and SOX readiness within a SAP-centric environment.

You will lead control assessments, maintain risk matrices, and collaborate with IT and business units to remediate deficiencies while supporting ISO 27001 certification efforts. Strong communication and project management are essential to liaise with auditors and drive improvements.

Qualifications

• Bachelor’s or Master’s degree in IT, Business or Accounting.
• 5+ years of IT audit/compliance experience.
• Experience with IT controls and risk assessment.
• Big 4 IT Audit background or ERP experience is a plus.

Responsibilities

• Manage timely performance of control assessments and evidence review.
• Assist in annual IT Risk Assessment for key financial processes.
• Maintain IT Risk Control Matrix documenting systems, controls and testing.
• Ensure proper accounting of ITGC SOX documentation.
• Identify opportunities to automate ITGC controls.
• Support testing of IT systems and controls for SOX in SAP environments.
• Support ISO 27001 certification evidence gathering.
• Collaborate with IT teams to remediate control deficiencies.
• Liaise with auditors for ITGC testing and compliance.
• Review SDLC controls and advise project managers on risks.
• Audit projects for SDLC compliance.
• Additional duties as assigned.

Skills

IT Audit

SOX Compliance

GRC

COBIT

SAP ERP

SOC 1/2

Communication

Leadership

Project Management

Education

Bachelor’s or Master’s Degree in IT/Accounting/Business

Tools

SAP ECC

SAP GRC

Job description

ThunderSoft in Malaysia is seeking an experienced IT Audit and Compliance professional to strengthen our ITGC controls and SOX readiness within a SAP-centric environment.

You will lead control assessments, maintain risk matrices, and collaborate with IT and business units to remediate deficiencies while supporting ISO 27001 certification efforts. Strong communication and project management are essential to liaise with auditors and drive improvements.