Senior Associate IT Internal Audit

FINEXUS Group; Kuala Lumpur; On-site; MYR 60,000 - 120,000; Full time

Job summary

Finexus is a multi-disciplinary Fintech firm providing software outsourcing and regulated products. We seek an internal audit professional to lead risk-based audits, assess regulatory compliance, and strengthen governance across financial services operations.

You will develop audit plans, review controls, and drive improvements while coordinating with cross-functional teams and senior management. This role demands attention to detail and the ability to meet deadlines in a regulated environment.

Qualifications

• 3–5 years of audit or compliance experience.
• Bachelor’s degree in accounting or related discipline; advanced degree and professional certifications preferred.
• Solid understanding of regulatory requirements and risk/control environment within financial services.
• Experience advising clients or teams in heavily regulated environments; attention to detail and analytical mindset.
• Organised and able to distinguish issues needing escalation from those you can resolve independently.

Responsibilities

• Develop and execute risk-based audit plans for assigned entities and business areas in alignment with applicable regulations, internal policies, and business strategy.
• Understand regulatory environment, business model, and priorities; identify key risks, assess internal controls, ensure timely completion of technology audits per regulatory requirements.
• Support the continuous improvement of internal control frameworks, risk management practices, audit methodologies, and overall business processes.
• Prepare and review draft audit reports, ensuring findings address control gaps; conduct special reviews and investigations.
• Translate identified obligations into policies and drive enforcement across business verticals and represent the team in work streams.
• Coordinate cross-functionally to support internal audit initiatives, and enhance risk management framework and controls.
• Oversee first-line risk owners, review their procedures, and implement remediation actions where necessary.
• Develop and execute audit plans based on risk assessments.

Skills

Attention to detail

Analytical mindset

Multi-tasking and meeting deadlines

Organised/Organisational skills

Education

Bachelor’s degree in accounting or related discipline

Advanced Degree and professional certification (e.g., CPA, CIA, CAMS, CFE, PECB ISO Auditor)

Job description

Finexus is a multi-disciplinary Fintech, providing software outsourcing and regulated products such as e-money, merchant acquiring, financing and remittance. Its technology services includes transactional and reporting software. Finexus holds multiple domestic and international certifications and works closely with card schemes and payment networks, and serve all types of banks - conventional, Islamic, investment and digital, for 25 years.

A. Overview of the Role

The internal audit team is a professional, business focused, proactive risk-based that operates with transparency, integrity, and independence. The function provides a systematic, disciplined approach to examine, evaluate and report objectively on the adequacy of both the design and operating effectiveness of the systems of internal control and the effectiveness of risk management and governance processes within Finexus’ regulatory appetite. We consistently invest in our people, offering genuine opportunities for development and advancement.

• 1. 3 – 5 years of audit or compliance experience


• 2. Bachelor’s degree in accounting or related discipline. Advanced Degree (e.g., Masters) and professional certification (e.g., CPA, CIA, CAMS, CFE, PECB ISO Auditor)


• 3. Sound understanding of regulatory requirements, the risk and control environment within the financial services industry.


• 4. Experience in advising clients or teams in heavily regulated environments, and your workarounds. Attention to detail and analytical mindset with an ability to multi-task and work against deadlines


• 5. Organised, practical, and able to distinguish issues that need escalation from those you can resolve independently

C. Job Descriptions at a High Level (Internal Audit & Risk)

• 1. Develop and execute risk-based audit plans for assigned entities and business areas in alignment with applicable regulations, internal policies, and business strategy.


• 2. Understand the regulatory environment, business model, and strategic priorities of the assigned entities; identify key risks, assess the adequacy and effectiveness of internal controls. Ensure timely completion of technology audits in accordance with regulatory requirements (BNM, PayNet, ISO and Card Scheme etc.)


• 3. Support the continuous improvement of internal control frameworks, risk management practices, audit methodologies, and overall business processes.


• 4. Prepare and review draft audit reports, ensuring findings and recommendations effectively address control lapses or process inefficiencies. Conduct special reviews, ad-hoc assignments, and investigations.


• 5. Translate identified obligations into relevant policies and drive enforcement of the same across all business verticals and represent the team in various work streams.


• 6. Coordinate cross functionally to support internal audit initiatives, and enhancing the risk management framework and ensure effective controls and procedures are in place


• 7. Oversee first-line risk owners, review their procedures and controls, and recommend or implement remediation actions where necessary


• 8. Develop and execute audit plans based on risk assessments