Manager, Information Systems Audit

SME Bank; Kuala Lumpur; On-site; MYR 100,000 - 130,000; Full time

Job summary

A leading financial institution is seeking a Manager for IS Audit in Kuala Lumpur. The role involves managing audit plans, supervising audit teams, and ensuring compliance with regulatory frameworks. Ideal candidates have a degree in IT or related fields and at least 4 years of internal audit experience, preferably in banking. Strong knowledge in Cyber Security and regulatory standards is essential.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, IT Security, Accountancy, or related fields.
• Professional certifications like CISA/CRISC are advantageous.
• At least 4 years of internal audit experience, preferably in banking.
• Strong knowledge in Information System audit.
• Understanding of regulatory requirements and industry standards like OWASP, CIS, NIST.

Responsibilities

• Provide input for the Annual Audit Plan based on a risk-based approach.
• Prepare and deliver audit reports as per the approved audit plan.
• Supervise audit activities and provide coaching to team members.
• Manage stakeholder relationships and communications.
• Assist in developing and improving audit methodologies and frameworks.

Skills

Internal Audit Management

Risk Management

Cyber Security Knowledge

Stakeholder Communication

Education

Bachelor’s Degree in Computer Science or related field

Tools

COBIT Framework

Data Analytical Framework

Job description

Overview

Add expected salary to your profile for insights

As a high-performance organisation, we offer our services through all our branches operating nationwide. Our key initiatives are driven by various action-plans to create a high level of engagement while nurturing the core values of S.M.I.L.E among the Talent Capital of the Bank.

Talent management and development are the cornerstone of our operations. We are continuously scouting for the right talents to fill up the roles as Manager, IS Audit.

Responsibilities

1. Provide input to the Head of Section (HOS) / Head of Department (HOD) in preparation of the Annual Audit Plan (AAP) based on risk based audit approach and concept on audit universe.
2. Managing, preparing and delivering audit reports as per audit plan approved by the Board Audit Committee (BAC). Submit and present report of the respective audit clients to HOS / HOD and Chief Internal Auditor (CIA) for deliberation and approval, within the scopes Information System audit.
3. Managing and execution of audit plan. Audits are conducted based on audit plan and ensure that the actual cost incurred is as per budget duly approved by the BAC. Audits are effectively conducted and scopes are proper in accordance with the risk based audit approach. Assist HOS in ensuring findings and recommendations and ensure they are accurate, specific and practical. Supervise the audit and team activities (resources). Assist HOS in managing the exit meeting with the audit clients, and highlight the issues and recommendations to rectify them with the management. Provide guidance and coaching to other team members.
4. Establish/Manage relationship and communication with the following Stakeholders: Audit Client, Middle Management.
5. Other duties and responsibilities. To assist HOS in performing special audit reviews/other ad hoc / assignments as directed by the HOS / HOD / CIA. To assist HOS in developing new or improve existing audit program, standards/techniques and Audit Work Guide / SOP where applicable to achieve efficiency and incorporate any review points from HOS / HOD / CIA. To play a participative and advisory role during IT project implementation phases. To review the audit work performed / working papers by respective team members. To assist HOS in developing and maintaining the latest methodologies/frameworks with regard to Internal Audit functions e.g. COSO Framework, COBIT Framework (i.e. COBIT 5, COBIT 2019) and Data Analytical Framework and/or to develop any other methodologies/framework in accordance with IPPF and IIA Standards as assigned by CIA from time to time.

Requirements

1. Bachelor’s Degree in Computer Science, Information Technology, IT Security, Information System, Accountancy, Finance or other related disciplines.
2. Candidates with professional certifications such as CISA/CRISC would have an added advantage.
3. A minimum of 4 years of relevant experience in internal audit, preferably in the Banking industry.
4. Knowledgeable in current Information System audit and approach.
5. Sound understanding in audit knowledge especially on Technology risks, Cyber Security and IT Security.
6. Understanding and ability to apply regulatory requirements and industry-accepted standards e.g. OWASP, CIS, NIST, RMiT, Paynet Cyber Resillience.