Senior IT Audit & Risk Assurance Lead

Koperasi Tentera; Kuala Lumpur; On-site; MYR 180,000 - 280,000; Full time

Job summary

Koperasi Tentera (KT) in Malaysia is seeking an IT Audit Manager to plan and conduct risk-based audits of IT systems, governance, risk management and controls. The role ensures compliance with policies and standards while provides independent assurance.

You will develop annual audit plans, assess IT general and application controls, review cybersecurity measures, and present findings to Management and relevant Committees to strengthen the organization’s control environment.

Qualifications

• Bachelor's Degree in Information Technology or related field.
• Professional certifications such as CISA, CISM, CISSP, CIA, CRISC or equivalent preferred.
• 7–10 years of IT audit/tech risk experience, with managerial or team-lead exposure.

Responsibilities

• Develop and execute the annual IT audit plan based on risk profile and priorities.
• Audit IT governance, cybersecurity, networks, apps, databases, cloud, IT operations, and system development.
• Assess IT general controls: access, change, backup, DR, and incident management.
• Review application controls, data integrity, and automated processes.
• Evaluate cybersecurity controls, vulnerability management, and cyber readiness.
• Review IT projects and technology procurement for risk and control gaps.
• Ensure compliance with policies, regulatory requirements and IT standards.
• Prepare and present audit findings with root causes and practical recommendations.
• Monitor implementation of agreed corrective actions.

Skills

IT audit

Stakeholder communication

Leadership

Education

Bachelor's degree in IT

Tools

Audit tools

Job description

Koperasi Tentera (KT) in Malaysia is seeking an IT Audit Manager to plan and conduct risk-based audits of IT systems, governance, risk management and controls. The role ensures compliance with policies and standards while provides independent assurance.

You will develop annual audit plans, assess IT general and application controls, review cybersecurity measures, and present findings to Management and relevant Committees to strengthen the organization’s control environment.