Senior IT Auditor – ISO Systems & Governance

SIRIM QAS; Selangor; On-site; MYR 150,000 - 200,000; Full time

Job summary

A leading certification body in Malaysia is seeking a Senior IT Auditor to join their Management System Certification Department. The role involves conducting audits for IT management systems and ensuring compliance with ISO standards like ISO 9001 and ISO 27001. Candidates should have at least 8 years of work experience, including 4 years in relevant fields. Fluency in Bahasa Malaysia and English is required, along with a willingness to travel. This position offers an opportunity to contribute to quality assurance and governance in technology.

Qualifications

• Minimum 8 years of work experience, with at least 4 years in relevant fields.
• Fluent in Bahasa Malaysia and English (spoken and written).
• Willing to travel and possess valid driver’s license.

Responsibilities

• Plan, lead, and conduct IT management system audits.
• Ensure audits meet ISO certification standards.
• Monitor and evaluate client systems for compliance.

Skills

Cybersecurity

Data Center Operations

Artificial Intelligence

Network & Communication

Application Development

Business Continuity

Education

Bachelor’s degree in Information Technology, Computer Science or related fields

Job description

Senior IT Auditor – ISO Systems & Governance

SIRIM Berhad is a well-established corporate entity responsible to lead and enhance technology and quality in Malaysia. We urgently seek qualified and dynamic professionals who are ready for a challenging career to join us as:

We are seeking an experienced Senior Auditor to join the Management System Certification Department (Commercial, Services & IT) at SIRIM QAS International Sdn Bhd. In this role, you will lead and conduct IT management system audits, ensuring compliance with international certification standards such as ISO 9001, ISO 27001, ISO 20000-1, and ISO 22301.

Responsibilities

• Plan, lead, and conduct IT management system audits following MSC accreditation requirements and annual business targets.
• Ensure audits meet ISO certification standards and identify improvements to enhance audit processes.
• Monitor and evaluate client systems to assess compliance with ISO 9001, ISO 27001, ISO 20000-1, and ISO 22301 standards.
• Contribute to the development of systems and procedures to maintain accreditation standards.

Requirements

• Bachelor’s degree in Information Technology, Computer Science, or related fields such as Cybersecurity, Artificial Intelligence, Software Engineering, Network & Communication, Application Development, Business Continuity, or Network Engineering.
• Minimum 8 years of work experience, with at least 4 years in Cybersecurity, Data Center Operations, Artificial Intelligence, Network & Communication, Application Development, or Business Continuity-related fields.
• Experience in sectors such as government, financial & banking, information technology, and security.
• Fluent in Bahasa Malaysia and English (spoken and written).
• Willing to travel and must possess a valid driver’s license and own transport.

Knowledge and certifications

• ISO 9001 (Quality Management System).
• ISO 27001 (Information Security Management System).
• ISO 20000-1 (Service Management System).
• ISO 22301 (Business Continuity Management System).
• Completion of related Lead Auditor courses is an advantage.
• Third-party auditing/inspection/certification experience is an advantage.

Interested candidates are invited to apply online not later than 7 Dec 2025. Only shortlisted candidates will be notified.

SIRIM Group is committed in ensuring the confidentiality, protection, security and accuracy of your personal information made available to SIRIM GROUP in accordance with the Personal Data Protection Act 2010. It is your obligation to ensure that all personal information submitted and retained is accurate, not misleading, updated and complete in all aspects. SIRIM Group and/or its employees or authorised officers or agents will not be responsible for any personal information submitted by you that is inaccurate, misleading, incomplete or not updated.