Senior IT Auditor: Cybersecurity & SOX Controls Lead

Advanced Micro Devices; Penang; Hybrid; MYR 120,000 - 180,000; Full time

Benefits offered by this job

Hybrid work model

AMD benefits at a glance

Job summary

AMD in Penang, Malaysia, is seeking an experienced Staff IT Auditor with 5+ years in IT audit, cybersecurity, and SOX ITGC testing to lead risk-based engagements. You will assess IT controls across systems and cloud environments, delivering practical recommendations and coordinating with stakeholders.

Ideal candidates have Big 4 or public company experience, and certifications such as CISA are preferred. Bachelor’s degree in IT or related field is required, with a hybrid work option available.

Qualifications

• 5+ years of progressive experience in IT auditing, cybersecurity, SOX compliance, or risk management.
• Professional certification such as CISA is preferred; CISSP/CIA/CFE/CEH are a plus.
• Strong knowledge of IT controls, SOX ITGC, COSO, COBIT, NIST, ISO 27001/27002.
• Experience testing automated controls and ERP systems (e.g., SAP) supporting financial/operational processes.

Responsibilities

• Lead risk-based IT, cybersecurity, and SOX audit engagements, defining scope and testing strategies.
• Evaluate design and operating effectiveness of IT controls, focusing on access/change management and IT operations.
• Perform system and report testing, validating data sources, completeness, and accuracy.
• Coordinate SOX ITGC testing with business and external auditors.
• Communicate findings clearly and build risk-based remediation plans.

Skills

IT audit

Cybersecurity

SOX ITGC

Regulatory compliance

Risk management

Documentation & Reporting

Education

Bachelor's degree in Information Technology or related field

Tools

SAP

Job description

AMD in Penang, Malaysia, is seeking an experienced Staff IT Auditor with 5+ years in IT audit, cybersecurity, and SOX ITGC testing to lead risk-based engagements. You will assess IT controls across systems and cloud environments, delivering practical recommendations and coordinating with stakeholders.

Ideal candidates have Big 4 or public company experience, and certifications such as CISA are preferred. Bachelor’s degree in IT or related field is required, with a hybrid work option available.