IT Internal Auditor

IJM Corporation Berhad; Petaling Jaya; On-site; MYR 90,000 - 140,000; Full time

Job summary

IJM Corporation Berhad in Malaysia is seeking an IT Internal Auditor to join our risk and assurance team in Petaling Jaya. You will assess IT controls, plan engagements, and advise on improvements across technology operations.

The role covers IT General Controls, cybersecurity, ERP systems such as SAP S/4HANA, and cloud platforms. You will apply COBIT, NIST and ISO governance standards, perform data analytics, and provide coaching to juniors.

Qualifications

• Degree or equivalent in IT, CS, IS or cybersecurity.
• CISA preferred; candidates pursuing accepted.
• Minimum three years' IT audit or governance experience.
• Strong knowledge of ITGC, ERP, cloud, and governance frameworks.

Responsibilities

• Plan, lead, and manage IT audit engagements, including scope and risk assessments.
• Evaluate IT general controls, cybersecurity, ERP systems like SAP S/4HANA, and cloud platforms.
• Review IT policies and controls against ISO, NIST and COBIT standards.
• Perform data analytics using audit tools and provide recommendations to senior management.
• Oversee follow-up reviews and mentor junior team members.

Skills

Audit leadership

ITGC

Cybersecurity

Analytical skills

Report writing

Interpersonal skills

Education

Degree in IT, Computer Science, Information Systems, Cybersecurity or related discipline

Tools

SAP S/4HANA

COBIT

NIST

ISO standards

Job description

About the role

We are seeking an IT Internal Auditor to join our team in Petaling Jaya. As an IT Internal Auditor, you will play a critical part in identifying risks, evaluating controls and recommending improvements across our technology operations.

Key Responsibilities

• Plan, lead, and manage IT audit engagements, including defining scope, risk assessment, and audit program design.
• Evaluate IT General Controls (ITGC), Cybersecurity, Enterprise Resource Planning (ERP) systems such as SAP S/4HANA, cloud systems and other digital platforms.
• Review IT policies, procedures and controls against recognized standards and good practices, including ISO 27001, ISO 20000 and the National Institute of Standards and Technology (NIST) frameworks.
• Perform thematic or advisory reviews on IT governance, cybersecurity, and digital resilience.
• Perform data analytics using audit analytical tool.
• Assist engagement with senior management to communicate key risks and provide recommendations.
• Oversee follow-up reviews and monitor remediation implementation.
• Provide technical guidance, mentoring, and on-the-job coaching to team members.

Requirements

• Degree in IT, Computer Science, Information Systems, Cybersecurity or a related discipline.
• Certified Information Systems Auditor (CISA) certification is highly preferred. Candidates who are currently pursuing CISA or will obtain the certification within an agreed timeframe upon appointment may also be considered.
• Minimum of three (3) years' of experience in IT Audit, Cybersecurity, or IT Governance.
• Ability to lead IT audit engagements and guide junior team members.
• Strong understanding of ITGC, cybersecurity, ERP systems, cloud environments, systems development life cycle, and IT governance frameworks such as COBIT, NIST and ISO standards.
• Strong in analytical and problem-solving skill.
• Good report writing, interpersonal and communication skills.
• Expected to travel. Having your own transportation is an advantage.