Don’t send a generic resume — generate a resume and cover letter tailored to this exact role.
Finexus Group seeks a Senior Associate, Internal Audit to plan and execute risk-based audits across regulated fintech services and technology platforms. You will assess internal controls, risk management, and governance processes, ensuring timely remediation and compliance with Bank Negara Malaysia and ISO standards.
Responsibilities include drafting reports, coordinating cross-functionally, and driving continuous improvements in audit methodology and controls across the group.
Finexus Group operates across regulated fintech services, including e-money, merchant acquiring, financing, remittance, transactional software, and regulatory reporting solutions. The Senior Associate, Internal Audit helps protect the Group by independently assessing whether internal controls, risk management, and governance processes are properly designed and operating effectively.
You will plan and execute risk-based audits across assigned entities and business areas. The role requires a clear understanding of Finexus' business model, regulatory obligations, and risk environment, with particular attention to technology and financial services controls. You will work independently and across functions to identify control gaps, recommend practical improvements, and support timely remediation.
Deliver risk-based audits on time and in accordance with applicable regulations, internal policies, and approved audit plans.
Provide clear, objective assessments of the design and operating effectiveness of internal controls, risk management, and governance processes.
Ensure technology audits address relevant requirements from Bank Negara Malaysia, PayNet, ISO standards, card schemes, and other applicable authorities or frameworks.
Produce practical audit findings and recommendations that address control gaps, process weaknesses, and regulatory obligations.
Strengthen the Group's control environment through follow-up, cross-functional coordination, and continuous improvement of audit and risk practices.
Develop and execute risk-based audit plans for assigned entities and business areas in line with regulations, internal policies, and business priorities.
Understand the regulatory environment, business model, and strategic priorities of the areas under review; identify key risks and assess the adequacy and effectiveness of related controls.
Complete technology audits within the required timelines and assess compliance with applicable BNM, PayNet, ISO, card scheme, and other relevant requirements.
Prepare and review draft audit reports, clearly presenting findings, risks, root causes, and practical recommendations.
Conduct special reviews, ad hoc assignments, and investigations when required.
Translate identified obligations into relevant policies and support their consistent implementation across business units.
Coordinate with business, technology, compliance, risk, and other stakeholders to support audit activities and strengthen the risk management framework.
Review the procedures and controls maintained by first-line risk owners and recommend or support remediation actions where necessary.
Support improvements to internal control frameworks, risk management practices, audit methodologies, and business processes.
Business scope: regulated fintech products and services, technology services, transactional systems, and reporting solutions.
Audit scope: internal controls, technology controls, risk management, governance, regulatory compliance, and operational processes.
Regulatory and industry scope: Bank Negara Malaysia, PayNet, ISO standards, card schemes, and other requirements applicable to the assigned entities.
Approach: independent, objective, risk-based, and evidence-driven, with clear escalation of significant issues.
Bachelor's Degree in Accounting or a related discipline.
An advanced degree, such as a Master's Degree, will be an added advantage.
Professional certification such as CPA, CIA, CAMS, CFE, or PECB ISO Auditor is preferred.
Three to five years of experience in internal audit, external audit, compliance, risk, or a related control function.
Experience working in or advising clients or teams within heavily regulated environments, preferably in financial services or fintech.
Sound understanding of regulatory requirements and the risk and control environment within the financial services industry.
Strong analytical skills and attention to detail, with the ability to assess evidence, identify control gaps, and reach objective conclusions.
Ability to manage multiple assignments, work against deadlines, and maintain clear audit documentation.
Practical judgement to distinguish matters that require escalation from those that can be resolved independently.
Clear written and verbal communication skills, including the ability to explain findings and recommendations to relevant stakeholders.
Strong organisation, integrity, independence, and professional discretion.
Ability to work cross-functionally and represent Internal Audit in relevant workstreams.
Ability to handle sensitive information professionally and maintain independence and confidentiality throughout audit and investigation work.
Experience conducting technology audits or reviews involving payment systems, transactional platforms, or regulatory reporting solutions.
Exposure to BNM, PayNet, ISO, card scheme, or similar regulatory and industry requirements.
We are a tech powerhouse with 500+ talents, serving 100+ banks, FIs & FinTechs across 10 ASEAN cities. Founded in 2000, we bring 26 years of expertise in secure cloud, RegTech, and financial infrastructure.
We offer: Cloud SaaS (e-invoicing, reporting, payments, CMS), Backroom BPO, Payment Gateway, Kayaaku Super App (e-wallet, cards, DuitNow), AREMA e-invoicing, FIDU QR platform & AI-Robotics
Join us in building ASEAN's future.
We are a tech powerhouse with 500+ talents, serving 100+ banks, FIs & FinTechs across 10 ASEAN cities. Founded in 2000, we bring 26 years of expertise in secure cloud, RegTech, and financial infrastructure.
We offer: Cloud SaaS (e-invoicing, reporting, payments, CMS), Backroom BPO, Payment Gateway, Kayaaku Super App (e-wallet, cards, DuitNow), AREMA e-invoicing, FIDU QR platform & AI-Robotics