IT Security Governance Lead — Audit & Compliance

Kenanga Group; Kuala Lumpur; On-site; MYR 90,000 - 150,000; Full time

Job summary

Kenanga Group seeks an experienced IT Audit & Compliance Lead to act as the primary liaison between Technology and auditors, regulators, risk, and compliance stakeholders. You will coordinate information requests, ensure timely delivery of audit submissions, maintain documentation, and drive remediation to close gaps in IT controls.

The role requires strong English communication, 5+ years in IT governance/cybersecurity/risk/compliance, and relevant certifications (CISM/CISA/CISSP/CRISC).

Qualifications

• Bachelor’s degree in a related field.
• Certifications such as CISM, CISA, CISSP or CRISC.
• Proven experience in managing audit and compliance processes.
• Minimum 5 years’ experience in IT Governance, Cybersecurity, Risk, Compliance or Audit-related domain.
• Expertise in risk assessment methodologies, cybersecurity frameworks (NIST CSF), and regulatory environments (RMIT, GTRM, ITSS).
• Technical knowledge of IT infrastructure, cybersecurity, and data management domains.
• Excellent verbal and written communication skills in English with good negotiation skills.
• Ability to own matters through to a logical conclusion.
• Meticulous in record keeping and documentation.

Responsibilities

• Audit & compliance coordination with internal and external auditors, regulators, risk and compliance stakeholders.
• Attend to all matters related to auditors and regulators and negotiate scope, timeline, findings, and remediation.
• Work with technical and business teams to collect, compile, evaluate, and assess information for audit submissions.
• Perform quality control on audit and compliance matters and document evidence.
• Cascade audit requests to auditees and manage discussions and clarify sessions.
• Collaborate with business units and auditors to close audit issues promptly.
• Conduct periodic reviews of activities against company policies and procedures.
• Report non-compliance findings to superiors and escalate as needed.
• Policy management: create, maintain, and enforce IT policies to ensure regulatory compliance.
• Identify gaps in IT processes and lead improvement initiatives.
• Perform gap analyses against industry or regulatory standards.

Skills

Audit & Compliance

English communication

Negotiation skills

Ownership

Record keeping

Education

Bachelor’s degree in related field

Job description

Kenanga Group seeks an experienced IT Audit & Compliance Lead to act as the primary liaison between Technology and auditors, regulators, risk, and compliance stakeholders. You will coordinate information requests, ensure timely delivery of audit submissions, maintain documentation, and drive remediation to close gaps in IT controls.

The role requires strong English communication, 5+ years in IT governance/cybersecurity/risk/compliance, and relevant certifications (CISM/CISA/CISSP/CRISC).