Senior IT Audit & Cybersecurity Lead

Tally; Kampung Malaysia Tambahan; Presencial; MYR 90.000 - 150.000; Jornada completa

Descripción de la vacante

Tally in Kuala Lumpur seeks an experienced IT Auditor to lead and execute IT and cybersecurity audits across the group. You will assess controls, governance, cloud security, ERP, infrastructure, OT, and third-party cyber risk, delivering practical recommendations.

You will apply data analytics, AI, and continuous auditing to strengthen cybersecurity, technology governance, and risk-based planning, while engaging stakeholders and providing advisory on cyber risk initiatives.

Responsabilidades

• Lead and execute IT and cybersecurity audits across the Group.
• Assess cybersecurity controls, IT governance, cloud security, ERP systems, infrastructure, and OT.
• Evaluate identity and access management, network security, endpoint protection, vulnerability management, incident response, disaster recovery, and third-party cyber risk.
• Provide assurance on compliance with internal policies and recognized cybersecurity frameworks.
• Apply data analytics, AI, automation, and continuous auditing techniques to enhance audit effectiveness.
• Develop and enhance IT audit methodologies, audit programs, and cybersecurity assurance practices.
• Prepare audit reports and provide practical recommendations to strengthen cybersecurity and technology governance.
• Monitor emerging cyber threats, AI developments, and technology risks to support risk-based audit planning.
• Engage stakeholders and provide advisory on cybersecurity and digital risk initiatives

Descripción del empleo

Tally in Kuala Lumpur seeks an experienced IT Auditor to lead and execute IT and cybersecurity audits across the group. You will assess controls, governance, cloud security, ERP, infrastructure, OT, and third-party cyber risk, delivering practical recommendations.

You will apply data analytics, AI, and continuous auditing to strengthen cybersecurity, technology governance, and risk-based planning, while engaging stakeholders and providing advisory on cyber risk initiatives.