Senior IT Audit & Controls Leader

CIMB Group Malaysia; Malaysia; On-site; MYR 120,000 - 180,000; Full time

Job summary

CIMB Group Malaysia is seeking an experienced internal audit lead to plan and execute end-to-end engagements, define scope, perform fieldwork, and prepare reports with findings and recommendations.

The role emphasizes risk-based planning, developing audit programmes, and providing practical improvements to strengthen controls, governance, and operational efficiency, while ensuring adherence to internal standards and regulatory requirements.

Qualifications

• Lead end-to-end internal audit assignments with defined scope and clear findings.
• Conduct risk assessments to identify key operational, financial, and compliance risks.
• Design and update audit programmes reflecting emerging risks.
• Provide practical recommendations to improve controls and efficiency.
• Communicate findings and action plans to Management for timely closure.
• Ensure audits meet internal standards and regulatory requirements.
• Monitor implementation and validate remediation of issues.
• Collaborate with business units to strengthen governance practices.

Responsibilities

• Plan and execute audit engagements from scoping to fieldwork and reporting.
• Assess and document control weaknesses and risk exposures identified during audits.
• Provide advisory support on internal controls, risk management, and governance practices.
• Contribute to continuous improvement initiatives and methodology enhancements.

Skills

Internal audit

Audit planning

Risk assessment

Report writing

Stakeholder communication

Job description

CIMB Group Malaysia is seeking an experienced internal audit lead to plan and execute end-to-end engagements, define scope, perform fieldwork, and prepare reports with findings and recommendations.

The role emphasizes risk-based planning, developing audit programmes, and providing practical improvements to strengthen controls, governance, and operational efficiency, while ensuring adherence to internal standards and regulatory requirements.