Manager, IT Audit

Crowe Malaysia PLT; Malaysia; On-site; MYR 120,000 - 160,000; Full time

Job summary

A leading audit firm in Malaysia is seeking an experienced IT Audit Manager to support financial audit teams by evaluating IT controls relevant to financial reporting. The ideal candidate will have at least 6 years of IT audit experience, work closely with audit teams and clients, and possess strong skills in data analysis and stakeholder management. Responsibilities include assessing IT General Controls, conducting data analysis, preparing audit work papers, and mentoring junior staff.

Qualifications

• Minimum 6 years of experience in IT audit or technology risk, preferably within an audit firm.
• Strong understanding of IT control frameworks and financial reporting processes.
• Proficiency with data extraction using ACL, IDEA, and Excel.

Responsibilities

• Perform ITGC and ITAC assessments for external audit reliance.
• Conduct data analysis and validate system-generated reports.
• Lead interviews with client IT and business stakeholders.

Skills

IT audit

Data analysis

Stakeholder management

Report writing

Communication skills

Education

Bachelor’s degree in Information Systems, Computer Science, Accounting, or a related field

CISA certification

CIA, CPA, CRISC, CISSP, or ISO 27001

Tools

ACL

IDEA

Excel

Job description

Role Overview

The IT Audit Manager supports financial audit teams by assessing IT controls over systems relevant to financial reporting. The role involves planning and executing IT General Controls (ITGC) and IT Application Controls (ITAC) reviews, evaluating the reliability of system-generated information, and performing data analysis procedures such as General Ledger (GL) completeness testing and report/data validation using tools such as ACL, IDEA, and Excel. The role works closely with audit engagement teams and client IT management to determine reliance on automated controls and system-generated data.

Responsibilities:

• Perform ITGC and ITAC assessments to support external audit reliance.
• Conduct data analysis procedures, including General Ledger (GL) completeness testing and validation of system-generated reports and data using ACL, IDEA, and/or Excel.
• Evaluate system environments and data flows supporting key business processes.
• Test the completeness and accuracy of system-generated reports and data.
• Determine the extent of reliance on automated controls and identify areas requiring additional substantive testing.
• Lead walkthroughs and interviews with client IT and business stakeholders.
• Prepare audit workpapers and conclusions in accordance with firm standards and auditing methodology.
• Identify control deficiencies, assess related risks, and provide practical recommendations.
• Review and provide quality oversight for work performed by junior team members.
• Work closely with financial audit teams to align testing scope, timing, and reporting.
• Communicate audit findings in a clear and concise manner to both internal engagement leadership and client management.
• Support engagement planning, budgeting, and timeline coordination.
• Supervise, coach, and mentor junior IT audit staff.
• Provide training and knowledge sharing to audit teams on IT control concepts.
• Contribute to methodology refinement and practice improvement initiatives.

Requirements:

• Bachelor’s degree in Information Systems, Computer Science, Accounting, or a related field.
• Professional certifications such as CISA preferred; CIA, CPA, CRISC, CISSP, or ISO 27001 are advantages.
• Minimum 6 years of experience in IT audit, technology risk, or financial audit support, preferably within an audit firm (Big 4 or mid-tier).
• Strong understanding of IT control frameworks, enterprise systems, and financial reporting processes.
• Proficiency in ACL, IDEA, and/or advanced Excel for data extraction and analysis to support audit testing.
• Ability to evaluate system environments and automated controls supporting financial reporting.
• Strong analytical, documentation, and report-writing skills.
• Ability to communicate technical matters in clear, business-friendly language.
• Strong stakeholder management and relationship-building skills.
• Ability to manage multiple engagements and deliver within deadlines.