Senior IT Audit Associate (GRC)

AGES Systems Gelderfarenit Pte Ltd; Kuala Lumpur; On-site; MYR 120,000 - 240,000; Full time

Job summary

AGES Systems Gelderfarenit Pte Ltd in Malaysia seeks a senior IT auditor to strengthen governance, risk, and regulatory compliance for PCI programs and related security assessments. The role involves frequent overseas travel and driving improvements to meet PCI DSS, CPP, SWIFT, and related standards.

The candidate will plan, perform pre-audit activities, draft findings, and support CSA Cyber Essentials Mark readiness.

Qualifications

• Bachelor's degree in Information Technology or a related field.
• CISA, CISM, ISMS, GSNA, ISO 2701, ACCA, CIMA or IIA(CIA) certifications are required.
• Minimum 8 years of related working experience.
• Strong analytical skills to interpret complex data and identify patterns.

Responsibilities

• Conduct internal and external pre-audit assessments and attestation/certification audits across PCI programs.
• Plan and execute audits, drafting audit issues and audit reports.
• Ensure audit work is efficient, well-documented, and within budget and timeline.
• Drive responses to regulatory reviews and external audits (PCI CPP/DSS, SWIFT, VAPT).
• Promote secure data management practices across business and technology functions.
• Support enhancements to governance framework and strategic initiatives.
• Assist and deliver CSA Cyber Essentials Mark and Cyber Trust Mark readiness and implementation.

Skills

Analytical thinking

English communication

Overseas travel readiness

Education

Bachelor's degree in Information Technology

CISA

CISM

ISMS

GSNA

ISO 2701

ACCA

CIMA

IIA CIA

Job description

We are seeking an experienced Senior IT Auditor to strengthen our clienteles' technology governance, risk and regulatory compliance framework. This role requires you to travel overseas frequently to conduct security assessments. The successful candidate will play a key role in driving governance improvements and maintaining alignment with regulatory requirements set by the Payment Cards Industry Security Standards Council (formed by MasterCard, Visa, Amex, JCB & Discover).

Key responsibilities

Conduct internal and external pre-audit assessments and attestation-based / certification audits across various PCI programs involving payment systems, card vendors environment, and IT infrastructure

Take responsibility for planning and executing audits, including drafting of audit issues and audit reports

Ensure that assigned audit work is executed in an efficient and effective manner, clearly documented, within the given budget and timeline, and in line with Audit methodology standards

Drive responses to regulatory reviews, external audits and industry compliance requirements, including PCI CPP, PCI DSS, SWIFT and VAPT related assessments

Promote secure and compliant data management practices across business and technology functions

Support continuous enhancement of the organisation's technology governance framework and undertake other strategic initiatives as required

Support and deliver CSA Cyber Essentials Mark, and Cyber Trust Mark readiness and implementation engagements

Undergo industrial professional certifications to be a certified auditor in the training roadmap

About you

Bachelor's degree in Information Technology or a related technical field with at least 8 years of related working experience

Certified CISA, CISM, ISMS, GSNA, ISO 2701, ACCA, CIMA or IIA(CIA) is a must

Advanced analytical skills to interpret technical data, identify patterns, and draw evidence-based conclusions

Strong written and verbal English communication skills to document and present audit findings effectively

Frequent overseas traveling is required for audit assignments

Required to sign a training bond for the external industry-related courses, certifications and industrial training provided

About us

Founded in 2004, AGES possesses extensive experience collaborating with prominent payment brands such as MasterCard International, Visa International, American Express Company, and UnionPay International on compliance assessments. We offer comprehensive audit services, including Payment Card Industry (PCI) Card Production and Provisioning (CP), PCI Data Security Scheme (DSS), PCI 3D Secure (3DS), PCI P2PE / Token Service Provider (TSP), SWIFT Customer Security Program (CSP), ISO security programs, and other relevant standards.

Your application will include the following questions:

• Which of the following statements best describes your right to work in Malaysia?
• Which of the following types of qualifications do you have?
• Have you completed a Certified Information Systems Auditor (CISA) qualification?
• Have you completed a Certified Information Systems Security Professional (CISSP) certification?
• Have you worked in a role which requires a sound understanding of PCI-DSS?