Regional IT Audit Lead - Cyber & Controls

ZUS Coffee; Shah Alam; On-site; MYR 90,000 - 150,000; Full time

Job summary

ZUS Coffee in Malaysia is seeking an IT & Digital Audit lead to plan and execute audits across core IT systems, including POS, inventory, payment platforms, mobile apps, and loyalty programs.

You will assess ITGCs and application controls, evaluate cybersecurity, data privacy, and system availability, and ensure compliance with PCI DSS, GDPR, and local data laws, aligning with governance and risk management.

Qualifications

• Bachelor’s degree in Information Systems, Computer Science, Accounting, or related field.
• 3–7 years of experience in IT audit, preferably in retail or F&B environments.
• Familiarity with COBIT, ISO 27001, and NIST frameworks; experience with audit tools is a plus.
• Certifications such as CISA, CISSP, CRISC are advantageous.
• Strong understanding of retail technology (POS, ERP, payment systems).
• Analytical, risk-based auditing approach and good communication skills.

Responsibilities

• Lead and execute IT audit activities across core systems (POS, inventory, payments).
• Evaluate IT general and application controls for design and operation.
• Audit digital platforms (online ordering, kiosks) for reliability and security.
• Assess cybersecurity, data privacy, and system availability.
• Prepare audit reports with clear findings and actionable recommendations.

Skills

IT audit

ITGCs & controls

Cybersecurity

Data analytics

Cloud environments

Communication

Scripting (SQL/Python)

Education

Bachelor's degree in Information Systems/CS/Accounting

Tools

ACL

IDEA

GRC platforms

Job description

ZUS Coffee in Malaysia is seeking an IT & Digital Audit lead to plan and execute audits across core IT systems, including POS, inventory, payment platforms, mobile apps, and loyalty programs.

You will assess ITGCs and application controls, evaluate cybersecurity, data privacy, and system availability, and ensure compliance with PCI DSS, GDPR, and local data laws, aligning with governance and risk management.