Regional Senior IT Audit

ZUS Coffee; Shah Alam; On-site; MYR 90,000 - 150,000; Full time

Job summary

ZUS Coffee in Malaysia is seeking an IT & Digital Audit lead to plan and execute audits across core IT systems, including POS, inventory, payment platforms, mobile apps, and loyalty programs.

You will assess ITGCs and application controls, evaluate cybersecurity, data privacy, and system availability, and ensure compliance with PCI DSS, GDPR, and local data laws, aligning with governance and risk management.

Qualifications

• Bachelor’s degree in Information Systems, Computer Science, Accounting, or related field.
• 3–7 years of experience in IT audit, preferably in retail or F&B environments.
• Familiarity with COBIT, ISO 27001, and NIST frameworks; experience with audit tools is a plus.
• Certifications such as CISA, CISSP, CRISC are advantageous.
• Strong understanding of retail technology (POS, ERP, payment systems).
• Analytical, risk-based auditing approach and good communication skills.

Responsibilities

• Lead and execute IT audit activities across core systems (POS, inventory, payments).
• Evaluate IT general and application controls for design and operation.
• Audit digital platforms (online ordering, kiosks) for reliability and security.
• Assess cybersecurity, data privacy, and system availability.
• Prepare audit reports with clear findings and actionable recommendations.

Skills

IT audit

ITGCs & controls

Cybersecurity

Data analytics

Cloud environments

Communication

Scripting (SQL/Python)

Education

Bachelor's degree in Information Systems/CS/Accounting

Tools

ACL

IDEA

GRC platforms

Job description

Jora Malaysia will close on 9th September 2026. Thank you for being with us, we are cheering you on as you continue your career journey.

To lead and execute IT audit activities that evaluate IT controls, cybersecurity, and technology risks, ensuring systems are secure, compliant, and aligned with the organization’s governance and risk management framework.

IT & Digital Audit

• Conduct audits across core IT systems including POS, inventory management, payment platforms, mobile apps, and loyalty programs.
• Evaluate the design and operational effectiveness of IT general controls (ITGCs) and application controls.
• Audit digital platforms (e.g., online ordering, kiosk systems) for reliability, security, and compliance.
• Identify key risks in technology-related processes and infrastructure (e.g., cybersecurity, data privacy, system availability).
• Assess compliance with industry regulations such as PCI DSS, GDPR, local data protection laws, and internal IT policies.

Operational Review

• Analyze tech-driven operations such as supply chain management, cold chain monitoring, vendor systems, etc.
• Review the integration and performance of ERP and POS systems (e.g., Oracle, SAP, Microsoft Dynamics, Toast, Revel).

Cybersecurity and Data Integrity

• Perform IT security audits focusing on access controls, network security, and incident response.
• Test controls around customer data protection and payment processing systems.

Reporting & Recommendations

• Prepare clear, concise audit reports highlighting issues, risks, and actionable recommendations.
• Collaborate with IT, operations, and compliance teams to follow up on remediation plans.

Qualification and Experience

• Bachelor’s degree in Information Systems, Computer Science, Accounting, or related field.
• 3–7 years of experience in IT audit, preferably in retail or F&B environments.
• Experience with technology frameworks (e.g., COBIT, ISO 27001, NIST) and audit tools (e.g., ACL, IDEA, or GRC platforms).
• CISA (Certified Information Systems Auditor), CISSP, CRISC, or relevant cybersecurity certifications are a plus.
• Strong understanding of retail technology (POS, ERP, payment systems, customer apps)
• Analytical and risk-based auditing approach
• Knowledge of cloud environments (e.g., AWS, Azure) and SaaS applications
• Ability to communicate technical issues in business language
• Familiarity with data analytics and scripting (e.g., SQL, Python – optional)
• Demonstrate strong communication skill, possess good report writing skill and audit presentation skills.
• Expertise in identifying, assessing, and mitigating risks related to IT.
• Possess positive attitude, hardworking and willing to take challenges and strives to maintain a good working relationship with team members and auditees.
• Able to work independently and deliver within the timeline given.
• Able to travel within Malaysia and overseas on short assignments.