Senior Information Technology Auditor

EPS Consultants Pte Ltd; Selangor; On-site; MYR 90,000 - 150,000; Full time

Job summary

Jora Malaysia is seeking an experienced IT Auditor to lead internal IT audits across controls, applications and infrastructure. The role emphasizes governance, security, and business continuity within a Malaysian context.

The ideal candidate has 5+ years in IT audit and strong knowledge of IT controls, ISMS and ISO/IEC 27001, with demonstrated ability to prepare robust audit papers and reports.

Qualifications

• Minimum 5 years of experience in IT audit or related fields.
• Practical experience auditing IT general controls, applications, infrastructure, networks, cybersecurity, and IT operations.
• Experience with ISMS and ISO/IEC 27001 internal audits is an advantage.
• Experience preparing audit working papers, findings, reports and corrective actions.
• Experience leading audit assignments and reviewing team members' work.

Responsibilities

• Plan and conduct IT audits covering IT controls, applications, infrastructure, networks, cybersecurity, data centres, IT operations, system changes, business continuity and disaster recovery.
• Assess IT controls, identify weaknesses, determine root causes and evaluate impact.
• Prepare and review audit working papers, ensuring documentation of evidence, procedures, findings and conclusions.
• Follow up on audit findings and corrective actions and verify supporting evidence before closure.
• Conduct or support ISMS and ISO/IEC 27001 internal audits, including reporting non-compliance and improvement opportunities.

Skills

IT auditing

Internal controls

ISMS

ISO/IEC 27001

Audit reporting

Team leadership

Job description

Jora Malaysia will close on 9th September 2026. Thank you for being with us, we are cheering you on as you continue your career journey.

• Plan and conduct IT audits covering IT controls, applications, infrastructure, networks, cybersecurity, data centres, IT operations, system changes, business continuity and disaster recovery.
• Assess IT controls, identify weaknesses, determine root causes and evaluate their impact.
• Prepare and review audit working papers, ensuring proper documentation of evidence, procedures, findings and conclusions.
• Follow up on audit findings and corrective actions and verify supporting evidence before closure.
• Conduct or support ISMS and ISO/IEC 27001 internal audits, including reporting non-compliance and improvement opportunities.

Requirement

• Minimum 5 years of experience in IT audit, internal audit, information security, technology controls, or a related field.
• Practical experience auditing IT general controls, applications, infrastructure, networks, cybersecurity, data centres, IT operations, system changes, business continuity, and disaster recovery.
• Experience in ISMS and ISO/IEC 27001 internal audits is an advantage.
• Experience preparing audit working papers, audit findings, reports, and corrective action follow-ups.
• Experience leading audit assignments and reviewing team members’ work is preferred.
• Strong knowledge of IT audit, IT controls, information security, and internal controls.
• Good understanding of COBIT, ISO/IEC 27001, ISMS, IT governance, and security standards.