Senior IT Audit & Controls Leader

AIA Shared Services; Kampung Malaysia Tambahan; On-site; MYR 120,000 - 170,000; Full time

Job summary

AIA Shared Services in Malaysia seeks an experienced IT Audit professional to provide objective assessment of internal controls and support the Board with independent evaluations.

You will execute IT audit assignments, contribute to building a regional IT audit capability, and deliver business-focused recommendations.

The role requires 10+ years in IT audit or information security, CISSP/CISA/CISM, strong English, and experience with IT infrastructure, cybersecurity, and risk management.

Qualifications

• University graduate in IT or Computer Science or equivalent.
• Minimum 10 years of IT audit, information security, or related experience, preferably with regional exposure.
• Holder of CISSP/CISA/CISM with strong IT controls and risk knowledge.
• Excellent command of English (spoken and written).
• Experience in IT infrastructure, Cybersecurity, SDLC, and/or business continuity.
• Knowledge of Cloud Computing is an advantage.
• Experience in life insurance or financial services is a plus.
• Energetic, results-driven, able to work under pressure.

Responsibilities

• Execute IT audit assignments according to Internal Audit Standards.
• Build Group IT audit team with relevant skills.
• Engage IT management to learn about emerging risks and changes for locations.
• Assist in annual audit plan development.
• Prepare audit reports per QAR requirements.
• Discuss issues and remedial actions with management.
• Follow up outstanding audit issues and monitor remediation.
• Pursue ongoing professional development through training.
• Perform other duties as assigned by Head of IT Audit.

Skills

IT audit

Information security

Risk assessment

English proficiency

Stakeholder management

Education

Bachelor's degree in IT or Computer Science

CISSP

CISA

CISM

Job description

AIA Shared Services in Malaysia seeks an experienced IT Audit professional to provide objective assessment of internal controls and support the Board with independent evaluations.

You will execute IT audit assignments, contribute to building a regional IT audit capability, and deliver business-focused recommendations.

The role requires 10+ years in IT audit or information security, CISSP/CISA/CISM, strong English, and experience with IT infrastructure, cybersecurity, and risk management.