Manager Information Technology (IT) Audit

Merchantrade Asia Sdn Bhd; Selangor; On-site; MYR 120,000 - 150,000; Full time

Job summary

A financial services company in Malaysia is looking for a Manager - Information Technology (IT) Audit. The ideal candidate will be responsible for auditing IT systems, ensuring risk management, and compliance with regulatory requirements. Candidates should have over 8 years of experience in IT governance and risk management, along with a degree in IT or Computer Science. This role offers a challenging opportunity to enhance IT processes and security within the organization.

Qualifications

• 8+ years of relevant work experience in IT audit or risk management.
• Good understanding of compliance requirements for financial institutions.
• Knowledge in multiple IT domains including AI and machine learning.

Responsibilities

• Develop and maintain IT risk-based audit programs.
• Conduct IT audits covering data protection and management.
• Perform gap analysis against IT regulatory requirements.

Skills

IT risk management

Cyber and IT security

IT governance

Data protection management

Project management

Education

Degree in Information Technology or related discipline

Professional certification (CISM, CISA, CISSP)

Job description

Manager - Information Technology (IT) Audit

The IT Auditor will be responsible for reviewing Merchantrade Asia's IT infrastructure, systems, data, processes, and management to ensure IT risks are properly identified, assessed, and mitigated, controls are adequate and effective, and operations comply with relevant regulatory requirements as well as internal policies and procedures. The role also involves providing IT advisory support by participating in new product, system, or project initiatives to ensure robust risk management and control measures are implemented.

Your main responsibilities will be to:

• Develop and maintain IT risk-based audit programs;
• Conduct IT audits covering IT domains such as data protection and management, cyber and IT security, IT governance and risk management, IT third party service provider/ vendor management, project management, service management, change management, software development, technology resiliency, cloud, AI and machine learning, disaster recovery and business continuity, as well as data centre;
• Perform post implementation reviews of system/ project implemented;
• Perform gap analysis against IT regulatory requirements;
• Involve in investigation of IT related fraud cases/ domestic enquiries and to recommend controls improvement;
• Participate in new product/ system / project initiatives and serve in an IT advisory capacity;
• Observe testing and conduct audit on business continuity and IT disaster recovery plans;
• Perform IT audit follow-up to ensure timely and satisfactory closure of audit findings.

To be eligible for this role, you will require:

• Degree in Information Technology (IT), Computer Science or other related discipline;
• Professional certification such as CISM, CISA, CISSP or equivalent is an advantage;
• 8+ years of relevant work experience in information security management, IT audit, IT risk management, IT compliance or IT governance, preferably in financial institutions (FIs) or equivalent.
• Good understanding of the regulatory frameworks and compliance requirements associated with financial institutions.
• Knowledge and experience in at least 5 IT domains such as data protection and management, cyber and IT security, IT governance and risk management, IT third party service provider/ vendor management, project management, service management, change management, software development, technology resiliency, cloud, AI and machine learning, disaster recovery and business continuity, as well as data centre.