Portfolio Audit Head, Technology / Digital & Data Analytics

AmBank Group; Kuala Lumpur; On-site; MYR 150,000 - 210,000; Full time

Job summary

AmBank Group seeks a senior Audit leader to head the Technology, Digital and Data Analytics audit portfolio. You will provide independent assurance on IT controls, cybersecurity, governance, and regulatory compliance, and support the Group Chief Internal Auditor in strategy and reporting to senior management and Board committees.

You will manage the audit team, develop annual plans, review findings, and engage regulators and external parties as needed.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Accounting, or Business.
• A master’s degree or recognised professional accounting qualification would also be suitable.

Responsibilities

• Lead the annual audit plan for Technology, Digital, Data Analytics, and Fintech areas.
• Oversee scheduled audits, investigations, and ad-hoc assignments.
• Evaluate IT and cybersecurity controls, risk management, governance, and regulatory compliance.
• Review audit plans, findings, and final reports before submission.
• Highlight control weaknesses and regulatory issues to senior management and Board committees.
• Monitor implementation of audit recommendations and budget/resource usage.

Skills

Technology audit

Cybersecurity risk

Risk-based audit planning

Stakeholder engagement

Team leadership

Regulatory & legal compliance

Audit reporting

Written & verbal communication

Regulator engagement

Education

Bachelor’s degree in CS/IT/Accounting/Business

Master’s degree or professional accounting qualification

Tools

CISA

CSXP

Certification for Bank Auditors

Job description

Lead the Technology, Digital and Data Analytics audit portfolio, providing independent assurance on the effectiveness of IT controls, cybersecurity, risk management, governance, and regulatory compliance. The role also supports the Group Chief Internal Auditor in managing audit strategy, resources, and reporting to senior management and Board committees.

Key Responsibilities

• Develop and lead the annual audit plan for Technology, Digital, Data Analytics and Fintech-related areas.
• Oversee scheduled audits, special reviews, investigations, and other ad-hoc assignments.
• Evaluate IT systems, technology projects, cybersecurity controls, risk management, governance, and regulatory compliance.
• Review audit plans, audit findings, recommendations, and final reports before submission.
• Highlight significant control weaknesses, technology risks, fraud indicators, and regulatory issues to senior management and the relevant Board committee.
• Monitor the implementation and closure of audit recommendations.
• Maintain effective audit methodologies, programmes, tools, reporting standards, and quality assurance practices.
• Work closely with regulators, external auditors, senior management, and key internal stakeholders on audit-related matters.
• Manage the audit team’s staffing, performance, professional development, succession planning, and technical capability.
• Monitor the audit portfolio’s budget, resources, timelines, and delivery against the approved annual plan.

Candidate Requirements

Education

• Bachelor’s degree, preferably in Computer Science, Information Technology, Accounting, or Business.
• A master’s degree or recognised professional accounting qualification would also be suitable.

Professional Certifications

• Certification for Bank Auditors.
• Relevant technology or cybersecurity audit certification, such as:
• Certified Information Systems Auditor, CISA
• Cybersecurity Practitioner, CSXP

Experience

• More than 10 years of internal and/or external audit experience.
• At least 8 years of experience in a managerial capacity.
• Audit experience within financial institutions is essential.
• Strong knowledge of IT and cybersecurity risks and controls.

Key Skills

• Technology and cybersecurity audit
• Risk-based audit planning
• Internal controls and risk management
• Regulatory and legal compliance
• Audit reporting and issue management
• Stakeholder and regulator engagement
• Team leadership and people development
• Strong written and verbal communication
• Ability to influence and engage senior stakeholders