Manager, Risk Consulting (IT Audit)

Crowe Malaysia PLT; Kuala Lumpur; On-site; MYR 120,000 - 180,000; Full time

Job summary

A leading auditing firm in Malaysia is seeking an IT Audit Manager to lead IT audits and provide consultancy services to clients. The ideal candidate will possess a strong background in IT auditing, hold relevant professional qualifications, and have experience in managing audit teams. This role entails ensuring compliance with regulatory frameworks and delivering quality audit services in a fast-paced environment.

Qualifications

• Possess Bachelor’s/ Master’s Degree in Computer Science or related field.
• 6+ years of experience in IT audit.
• Certification like CISA or CRISC highly desirable.

Responsibilities

• Lead IT audits using the COBIT framework.
• Oversee IT audit engagements and provide coaching.
• Consult with clients on enhancing IT controls.

Skills

Leadership

Communication

Analytical Thinking

Cybersecurity Knowledge

Knowledge of Regulatory Frameworks

Education

Bachelor’s Degree in Computer Science

Master’s Degree in Cybersecurity

Job description

Responsibilities:

• Lead and participate in IT audits using the COBIT framework including audit planning, fieldwork, reporting and follow-up.
• Oversee the IT Audit Engagements by performing quality reviews to ensure that the IT Audit Objectives are met satisfactorily.
• Provide on-going coaching and direction to a team of IT Auditors to ensure that audits are performed in accordance with department and professional standards.
• Maintain a strong current knowledge of IT issues affecting businesses to assess the efficiency and effectiveness of the client’s IT general and application controls.
• Provide consultancy or advisory services to clients, if required to strengthen their IT general and application controls.
• Presentation of reports to the Audit Committee/ Board of Directors.
• Assist in business development initiatives, eg: preparation of proposals, participation in potential client meetings, etc.

Requirements:

• Possess Bachelor’s/ Masters’ Degree in Computer Science, Cybersecurity or related IT fields.
• Possess professional IT qualifications, e.g. Certified Information System Auditor (CISA), Certified Risk and Information Systems Control (CRISC), etc.
• At least 6years of working experiencein a similar role in an advisory or consulting firm.
• Experienced candidate is expected to be familiar with COBIT, NIST, BNM RMiT, PayNet, SC Cybersecurity framework and requirements.
• Demonstrated experience managing audits within a complex operational and regulatory environment.
• Demonstrated ability to plan and execute IT audits focusing on IT General Controls, including Access Security, Computer Operations, Change Management, Third Party Management, Business Continuity, Cybersecurity and Application Controls.
• Extensive information security and network control audit knowledge, and experience with network footprinting and penetration testing tools would be highly regarded.
• Experience in managing a staff of diverse professionals.
• Must possess strong interpersonal and written communication skills.
• Pro-active and able to work independently as well as on a team in a fast-paced, deadline-driven environment.